{"report_id":"6152f8eb-2118-4064-8e5f-c4ca1cfbb193","version":0,"status":"done","tags":[],"date":"2026-09-03T18:55:40Z","url":{"schema":"http","addr":"bansuridabeli.live/","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bansuridabeli.live/","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"title":"Bansuri Dabeli | The Real Taste of Kutch","dom":{"size":56308,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (495)","md5":"a295f228f9ecd04402a4a55c1cbaddf6","sha1":"b766ad0ec3fd7d6d6d01a76fa400a6bb381ae981","sha256":"d8d8f158a19ee9dbae72f016eae619627782ac01d49ded364d69922d323c1277","sha512":"5b568d85b9641f6719fac3a156cd7f5666dd72903944554f924dffdedc48e4d22600137e2e2e8354ebea53b076bfad56e0bf81a8799bf3318cc7d3380dfe2fe0","ssdeep":"384:kkLTRwCLyjhmgV42bsbuHR2skRr2qpm7HDz4DJNiWccD6rBEDrVy0dYWOoSpvVvN:7G0yq2gkX4NNiWcccWZ3uN+y","tlshash":"36437ea121f11933e192d1996a594b3abec1fa03d95e860132fc3bc85fd3d66cf97809","dom_hash":"domhash75a506801bb68b258b0ddfdd96746507","first_seen":"2026-09-03T18:56:05.937158Z","last_seen":"2026-09-03T18:56:05.937158Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bansuridabeli.live/","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-08T18:55:40Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"code.jquery.com","ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2005-12-10","domain_rank":4915,"first_seen":"2012-05-21T17:28:02Z","last_seen":"2026-08-31T00:27:10.021732Z","alert_count":0,"request_count":1,"received_data":96427,"sent_data":484,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"bansuridabeli.live","ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-03T18:55:46.759973Z","last_seen":"2026-09-03T18:55:46.759973Z","alert_count":290,"request_count":58,"received_data":19866240,"sent_data":30278,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery:1.11.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-30T22:22:21.72184Z","alert_count":0,"request_count":11,"received_data":499691,"sent_data":6327,"comment":"","tags":null,"fingerprints":null},{"fqdn":"unpkg.com","ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-08-31T08:14:24.763257Z","alert_count":0,"request_count":4,"received_data":45335,"sent_data":1928,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-30T22:24:29.229878Z","alert_count":0,"request_count":2,"received_data":34384,"sent_data":1115,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"lh3.googleusercontent.com","ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":303,"first_seen":"2012-05-22T07:35:05Z","last_seen":"2026-08-31T12:13:43.287839Z","alert_count":0,"request_count":4,"received_data":10426,"sent_data":2447,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bansuridabeli.live/js/main.js","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c62580065224f4a844bf0f791ccd4b26","sha1":"c5e72a2d529ffd3036fbaf8ab05b1165ebea9c70","sha256":"a0c1e1d9fc7d4a62afa15a06108a9f182fd5f3e2c7c5c055939ae9016e36f3c7","sha512":"62277c322f356cb6d1e2fb171e122c1e528d7d0a91803eb46a714b46c167cbd8ba7fab77494ed842c9c4ceed30b0ef828c51331e4db9af7bddbe5d5ff4f066d6","ssdeep":"","tlshash":"89d022390479303080f632e1328a1384a44c006fa006883438dbc3c91f248e51ab5cb8","size":207,"data":"","first_seen":"2026-09-03T18:56:05.996765Z","last_seen":"2026-09-03T18:56:05.996765Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@next/dist/aos.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aa20b6e0418d20fb86b071e670b2b207","sha1":"e38950c1bce65e9f048e305b3567ff90a0c923e3","sha256":"dd1f9acf13b12f189da475e0f23c7c505767859ab620aac636964974093c281d","sha512":"b6734ce8f3cd3957d9e6c18fc3a853842adc5017aab76995124dc4023f2d0adb8c1ea6ee566e7f1ec65a82bafc5b669a144fbaaca201c86c106c49e6a1dad856","ssdeep":"192:mOaHX24ysbeCVXVyILkYmTpOIytlomlBpOIVtlomlrjm5bovo5FglaZW0fNacZgu:mVpyRSVLL28HVjkFglMfNaEg+l","tlshash":"91520adc7286f166475394bb417f610bf2f154a4684d8040e239c5e73eb989aca33eae","size":13800,"data":"","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-10-15T05:10:48.817048Z","times_seen":11491,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6bd43cf0ae158526c6ab93dc3be79f28","sha1":"15c289e342bd3fdf5b1e95f7abf25a2bc78bf357","sha256":"7a13d5ae0755d86c09084ec300c4a0f1a0a06921f74d9980eba9d966ff17ad38","sha512":"5190eb107c27f5d655eab378cd468228aa031d088f59082f257f41d464a29fbdb23594043afe89a3f9b63ce86d91efad6c2901c816d85196389293a6a5a28521","ssdeep":"","tlshash":"df90040100513554711530d00134c3dd157df075dc4dd335754f57004040405c53c401","size":40,"data":"","first_seen":"2023-03-07T01:02:07Z","last_seen":"2026-10-15T04:16:54.165332Z","times_seen":33770,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a551243427b256df8e6d58adcc741389","sha1":"ef4dd74512acd32121431849fd4acfd7179b4d70","sha256":"44711c69e17ddf6ba7aa53059c4d7f52f8536993c45728a4173cc08f9f1a0584","sha512":"9814ae3c303bd308fcdd955897654e9a388fdabad203a22ac93e4e724aea16398c99a2932c374d3e024b9f677279c01c8913797cef7c21aed79aaf12dee037b5","ssdeep":"","tlshash":"2bd097a668200a7d007b03d7e28483a6c03202423302a8a5c48fa50444c9c832af3f50","size":243,"data":"","first_seen":"2026-09-03T18:56:06.043751Z","last_seen":"2026-09-03T18:56:06.043751Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9ad0db71426e78da1bc9dd9987453683","sha1":"53acb2ce5abf9963a6cfa69ccd8c587d794bec13","sha256":"3ae7fec215ca3412172e77254e44e946f65b000163165dae98bb587558efc919","sha512":"f6eb8726b987faa83bfa1a6b6bd64685e0a6954e7655b9faa5e04f57700573355752974f13539e3356fc4f563d2669acc597f09c79f267c9b49f973709671947","ssdeep":"","tlshash":"5db02220e8f0238800233ac03a2fa0082802b00a00080c32ff0cc0c0cf08b3c033b00c","size":115,"data":"","first_seen":"2026-09-03T18:56:06.045594Z","last_seen":"2026-09-03T18:56:06.045594Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"84a4a15b3dd032c3084e4003a5cf81bf","sha1":"c3ced1434dbaa1b9069f2dafea614dc74347a895","sha256":"2be13a50f1e023afc5b20145f8fc7cb28a503d3b03a04d2760e58a75bec3514f","sha512":"3e2ed3a3a50c9799013eb488150f1dd2b6f909dc9005dca0b009b6de6eab8fc4121ac840791af8a712d31d9607baa432fde78eb12767727b04678ef32c4f1624","ssdeep":"","tlshash":"acf02e2cf4f6631010bbb03c8f2f5218b626505b724d8d40344ded5c7f51239a695685","size":474,"data":"","first_seen":"2024-08-19T21:01:19.717465Z","last_seen":"2026-09-03T18:56:06.049138Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"0e215a7ec39e5261f8b268e56b77a6fd","sha1":"3ac7d84f29b725c2db3feaed5aefe977228cafd0","sha256":"5f75e31bc91dc6cce4207ae01b7c8f709ef0ea4f859d9f8a621a7fb8352ba61a","sha512":"bdbe4a2eae8115a1a82b2d676acf961f89a24f0355fbc29987ff72abd581399b66a3c73c36d4a12614856d5990e5b9c66fd0a74bf565b67fff6d0d9d231c4f11","ssdeep":"","tlshash":"b9500000c0030c330000000c0300000030030c0003300000000000c00000cc0333000c","size":11,"data":"","first_seen":"2023-03-07T12:06:53Z","last_seen":"2026-10-15T04:19:05.590647Z","times_seen":1857,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.11.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","size":95786,"data":"","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-10-15T04:29:08.924365Z","times_seen":61105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bansuridabeli.live/images/shop-three.jpeg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.534Z","timestamp":1788461707534,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/shop-three.jpeg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7881b67c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb44-54186\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:08 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=A%2BWxONKt3wzwkUoKLMCVkmuR7ivqwE6sowi6Jaf46iejjjPTM34w7EJxlepLDWboyfRNmZJESoxN7D4BQnS06FpPfT%2BrxierBzFrvMOJviDEybtQwlXRpkpBDyBReE8vrtfVr0k%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 344454\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":344454,"size_decoded":345264,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1200, components 3","md5":"614cabc1f924fa38d6647b72c3a15c55","sha1":"afe3eb3d81bc725bdddfa9189436c64ab40fb7eb","sha256":"57b8d393e00f98bf2536f3fd1b103ed9b11a238afcd785331d2ef9c14bf7240a","sha512":"a01104044594e3f7128b7def096e859c918916458b2128b9927cfc1222565d5f030f5c5ca25edddc96c43d1d1c3916f81ddcff820b3553f354f41c30fe2b5c84","ssdeep":"6144:C/ZOBG7jLc2uIdlOHHdHKKv+gRfkpsHr7I0vQ0euAzA5dszIf4F41OBA:CR8k9vlOndHKK51kpFB0euAE5aA4F41V","tlshash":"827423607139fca312d599fbd054b8b8f4d208187ae4119e1ea715d4fc6a0df8ab89cf","first_seen":"2026-09-03T18:56:05.938994Z","last_seen":"2026-09-03T18:56:05.938994Z","times_seen":1,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":189,"receive":158,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/chilli-paneer.jpeg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.550Z","timestamp":1788461707550,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/chilli-paneer.jpeg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7883b7ac272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb35-461b4\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:08:53 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=okepwWz846uhrDhixt6E76FP5Q1l9GFGyhfInM%2BD5Cm0dqQwGvcKZ9C%2FIckHjZiIGG%2BdRnjQqeFJEvKrvFBR90EcP6nnq7Sm9P2rcTMljEnjhVZqQ9uOUM03Vr4x%2BHplq4dkADw%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 287156\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":287156,"size_decoded":287970,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1200, components 3","md5":"437c3cadc56e762b4eae8aa2c5196414","sha1":"19733f1f40a685a7502c6b13e4044cedb77529f6","sha256":"af258de2421487db9f313cdcb29fb0a4cb2f893778b27d4e3acc3b157df4a553","sha512":"72f40254923ae3007f2cf494ee9d4814dec119d4b407ca0106ae73954415e1699969e20d2a736c7d022db69e208f21516b6d3e9faacf38d72f73cbb475af2218","ssdeep":"6144:adPj2WqJbIJ6zqPYlhpjfJmraRqIgs5OJZ5wNP3:aBsJbIJ6zqPYjVftqIvNP3","tlshash":"3054237b439262debc83d479d3663f06d07ab69603c7343c7007a63a9db2ad9464868d","first_seen":"2026-09-03T18:56:05.94047Z","last_seen":"2026-09-03T18:56:05.94047Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":131,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/manchurian-wrap.jpeg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.555Z","timestamp":1788461707555,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/manchurian-wrap.jpeg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7883b83c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb3c-4e365\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:00 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cD%2F5TC0U6gzGyPYQcyvK24sM2GbL%2FW9eEIKIX0vV2Hxa8S0pDxAITOScqC2gmLUy9fLFGMYCyQLuY1lMTkU0gmoKAagHlDoqkagVqdTZqvQUKDSe0sujnnUkRjOTUgS2Z1SXKmI%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 320357\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":320357,"size_decoded":321167,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1200, components 3","md5":"aebd191e70e29ca48c414d173322628d","sha1":"1bbf6e1f86d3abb7000b6b2b94823d947ae227ee","sha256":"cb9b240e63752769ab95752892eccb147f4c829a6e4b2b95c7daa2ab98e676f9","sha512":"a07aa337ed372c17b2abd5000b7bedcdcdedd66c40f991af229bb44080c41a19d068c855c10c67ef6ffdc5c1f6acd3c7b12e353112a7613f18de9f530ebc5a6f","ssdeep":"6144:1PQ/LOHiPQnaRN9fcWv+WHKYJw9kLbOSyMDSEVdkYslrTGLJPX1/:1PW2aRcYKcLbONZidkfT8f1/","tlshash":"c86423e4f3dfe175a9dafb45f7a288015245e7041b49e9b031181b2de1c464d8ebd2e3","first_seen":"2026-09-03T18:56:05.941964Z","last_seen":"2026-09-03T18:56:05.941964Z","times_seen":1,"resource_available":false,"data":null}},"time_used":339,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":167,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:08.131Z","timestamp":1788461708131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bansuridabeli.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 116621\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-15T04:30:23.586772Z","times_seen":316910,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":42,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/BansuriDabeli_Logo.png","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.531Z","timestamp":1788461707531,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/BansuriDabeli_Logo.png HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a356f7881b64c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb30-110ce\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:08:48 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WJBYd1s303uQckVC%2BwEhsst1N60NlfGDsseKIItUtYvWMWUULNUppLC%2BhEM2l3i3yYJYDODqaxIeDxVwRkgNySUhsymeaM7JSZqc%2BPNtCcpDRG6afuHq5ZPd5aSYPeerkVi8k68%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 69838\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69838,"size_decoded":70648,"mime_type":"image/png","magic":"PNG image data, 567 x 255, 8-bit/color RGBA, non-interlaced","md5":"f27351c79fc1310dc342aba08716546c","sha1":"b78b9cc7eba027f1394b916bcd7aba1dc3e22c16","sha256":"f4c6b0b4afdca2458d3daff3ffa010a1faf205ca45bc2960e07eaaef174d8227","sha512":"c2f57d9668c6f4e28140626accd37ace367475e5e8b2a9160b80fc92728a12f5ea73cfe79b7e4d2d4a151ed84f97deb72039c0c02b6967895f01dad0e433f5ec","ssdeep":"1536:DcOt6uS3/2SoVF5ODbsH1HbeBzskNA/4N:DcOtXS3/29XWsQBzskQI","tlshash":"f063f1c87411bf923746f423536a74e6ec278c97cedfb49e660e906723794b286260c6","first_seen":"2026-09-03T18:56:05.944148Z","last_seen":"2026-09-03T18:56:05.944148Z","times_seen":1,"resource_available":false,"data":null}},"time_used":246,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":186,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/samosa-wrap.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.556Z","timestamp":1788461707556,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/samosa-wrap.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7883b84c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb42-1dada\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:06 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0VFME4qGPmx4CBQcFnKhp3WtJp2LqBSPZbqvEmpsBAcn2Vpqzc7MZUsEuBjgzwv34ChVCjsu%2BlgbnvAiQ2iYX2NKoBGvukolA5Oy%2FcuYJZXBUzLdK4hAe6Jenhn5YN8M2Yr9toU%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 121562\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":121562,"size_decoded":122372,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1000x754, components 3","md5":"72bd47156db5960d50d17df7f348bc8f","sha1":"ad4a0fb027ce8b248b2392c08042b1a55201da81","sha256":"a8a83f4d8ca6cd6a6741199b9669987e62cff01e2fd2ee8ebb37363e3a2083d2","sha512":"0ff892e4218c8d9537e162275eccc7121fcdff0fd3919dfd832b130ce7bb56d554ccbceb2e4b4160cbd597c9e13e5d61b59e5bd538faccc5545dffc9c035188f","ssdeep":"3072:OV6yRgLWQxYcEnLryrfiGvEbuHlPZYMlvh/k4:OV6ycWQxoWEKHlP6oR","tlshash":"c5c31288a9160adc7e85129effad8d16589de58bdfe8460736f4390d08dc5a347f350c","first_seen":"2026-09-03T18:56:05.945484Z","last_seen":"2026-09-03T18:56:05.945484Z","times_seen":1,"resource_available":false,"data":null}},"time_used":303,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/SchezwanPaneerRice.PNG","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.558Z","timestamp":1788461707558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/SchezwanPaneerRice.PNG HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a356f7883b86c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb43-2ce07\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:07 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=q2Cr3zXxN4nmuZl7U%2FzxFz8bEvQiqoZzj2aEVtATMqRQNVx0DPO7rKDdLMHYdxZHAhikuzOmM%2FFF1jZ%2FZJpRf3atLO2AAwyI4vWtM2mgLKv7OQ8YWvD2wwsjOLAMtmC62ANDliI%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 333517\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":333517,"size_decoded":334328,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T04:37:27.151429Z","times_seen":19113866,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":265,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/BhajiPulavRice.png","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.559Z","timestamp":1788461707559,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/BhajiPulavRice.png HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a356f7883b87c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb34-638cb\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:08:52 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jQSomsUjIE2LtTOEIiP2X5wBbCpPPaGhFYpnRHxC%2FKyJIh9F38L%2BtSmH8Ki7IUIziJwUlDVx3Y%2BM62FHhQJSAWlVz4XdWWJVqvkucMsxAyGOszLP30fgT%2BZiv9SNZ8og0qCmtdI%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 407755\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":407755,"size_decoded":408568,"mime_type":"image/png","magic":"PNG image data, 480 x 270, 8-bit/color RGBA, non-interlaced","md5":"2777f0eb98ab19bd7c39985990128ba8","sha1":"a6a8f9a4b1ed1fcc20372decb63429bacda4bd15","sha256":"8b6c46b61e4fcf6976465e11fb594b0fc0560380bf425e015862bb5774d4a5f5","sha512":"ced9755769eed46e1f2e22a65dd5018a3b39ed67209f30f8dc7183540ad7d23f8df8dcf675946bdf2d2b8d4c699990da6a43c3d86ee5c0cdf644c983b8bc7c6f","ssdeep":"12288:uDuNMz0rjiHBrU95zcAko0d9SzyJrqbrfikl0:uDuNOYjiHKTxkoQ9SzyVmLbl0","tlshash":"fb842357574a126d0212091ba0fdb08066feb34a651fe6c2be11f8598ab3f9cb9c715c","first_seen":"2026-09-03T18:56:05.947369Z","last_seen":"2026-09-03T18:56:05.947369Z","times_seen":1,"resource_available":false,"data":null}},"time_used":364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":190,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/pani-puri.jpeg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.560Z","timestamp":1788461707560,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/pani-puri.jpeg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7883b89c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb40-39ed3\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:04 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d%2Bp1M53SY67uQcdrF0YMaD1uofSY%2B5mjUNRMRVP5oyZLpxUYQ41dCvn0UMgwUmG2ourgk4iVRVh%2F4lawLGq9l2w3JDI1XsDOgNf8rfJfaGgrAGNz%2F3ybbCy3M9rq%2BI1vrI7H%2B6Y%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 237267\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237267,"size_decoded":238085,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 903x631, components 3","md5":"d4082a3803c6e23d5e39046b57e7e6a1","sha1":"94dfc10cc6fea5c90e6e54ce5c3a4dfebbbce870","sha256":"dbd375713c737a0c41d04ab423acd78056c0225a82e2fe6291588c6a357ee3a1","sha512":"05f7bce87bc7d4f426e6d560a3942215586ac8f5dbd5276ac64c7a457540c509f773f254ec81163df866a318cb7a0092dde94570146ced181bc0133eb3bb6e01","ssdeep":"6144:MuFXQ/Kua7rn0ggOEHNkfxA92KMg4k6QfzABJgtUoQ19/:rDukrnOOekJA92KMgH6CA387QX/","tlshash":"3834228085185d42ac0833cc92e94eacec4fab7037c7f4a7b1727e14bf525b68625e61","first_seen":"2026-09-03T18:56:05.94846Z","last_seen":"2026-09-03T18:56:05.94846Z","times_seen":1,"resource_available":false,"data":null}},"time_used":291,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/stuff-chillies.jpeg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.573Z","timestamp":1788461707573,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/stuff-chillies.jpeg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7885b98c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb46-4280c\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:10 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=O4297mcHQs5%2FPWVnn55kC%2FxYn5XYkwY49IE8bGOksUa43K5lesSOi1veWmTxOePClx6kDfWwfpMEgawCeziPP8b37xz7%2BvUSu%2FWprOexN8Y84aV2cOYIhVV5EXeji%2B9J2VXiGtQ%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 272396\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":272396,"size_decoded":273212,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1200, components 3","md5":"8e44b0898139dc062fb2151f8f8463b0","sha1":"f2773e23f6f26c10666e66e02894c3cdef011235","sha256":"9f307a2cdfc01c32aa17e6874e596fc7b0443e1972f85607b324e17efc8819a2","sha512":"a4b6be4c2b5ebd34959e0c3e70f4ec3904bd40ba474eb5067639572ecb28be724297ad8a9c123e0589c1e97299dbf03a4ff971259b270721916c0d3f6fc2105f","ssdeep":"6144:23vSNOlL9FB1B3GLcKsbf7t2uQSlk37mmH9wm0:236NwLnB/GUbTEelk37mD","tlshash":"dc441215eecbb963e51d30d4fe020a93a6e9c5b6cdcecd4b15de0c4e821dea14f21266","first_seen":"2026-09-03T18:56:05.949581Z","last_seen":"2026-09-03T18:56:05.949581Z","times_seen":1,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":157,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@next/dist/aos.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.525Z","timestamp":1788461707525,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /aos@next/dist/aos.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 44\r\nlocation: /aos@3.0.0-beta.6/dist/aos.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a356f7880a1c5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T04:37:27.151429Z","times_seen":19113866,"resource_available":true,"data":null}},"time_used":35,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/dahi-chaat.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.563Z","timestamp":1788461707563,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/dahi-chaat.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7884b8dc272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb39-83ddf\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:08:57 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SeMEVxKbZF5mgISVc4hQLfY8CwfM70smUQ%2B0OxzfuluM0XbBeW9pS5a8dnv%2BI%2BmgqneHddF4rmElv1MEEx8l8T%2B9Mzsf5jsMCyGpvAxB3341b2RuTtZzy%2FrKgTwfI34tnxc6ooA%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 540127\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":540127,"size_decoded":540943,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 96x96, segment length 16, Exif Standard: [\n- TIFF image data, big-endian, direntries=3, orientation=upper-right], progressive, precision 8, 1536x2048, components 3","md5":"41d3b05f801de1a00367963f54a824cc","sha1":"fee89b5d4817efb6a60e1d39c12f4137d7f97e66","sha256":"6c0f208ef4f8dcd3099d948386a87862dc043221c8707458f89aa9ba48bb9962","sha512":"700291c1cf90a2d34532866a27d543fac7c7d1219e6bbe33a8b11842b0236e000336b2f17fa46d23e76aecef79c520dac1602f499f8ea65d9c3042d017a194ad","ssdeep":"12288:UIGNPbjmjVhXmO1AiZEHPwbEukviZhUib6U:UIGNPOxAiGvYEuASb3","tlshash":"92b4236733231229defc717a129f536c318864d947119c39ba0e26fa3b3d07269ca9c7","first_seen":"2026-09-03T18:56:05.950844Z","last_seen":"2026-09-03T18:56:05.950844Z","times_seen":1,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":203,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:08.127Z","timestamp":1788461708127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bansuridabeli.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 28 Aug 2026 18:08:07 GMT\r\nexpires: Sat, 28 Aug 2027 18:08:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 521221\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-10-15T04:33:47.898176Z","times_seen":571467,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":61,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/jalebi-one.jpeg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.575Z","timestamp":1788461707575,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/jalebi-one.jpeg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7885b9bc272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb3b-39c25\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:08:59 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F8hSYxIs7SPofbjObWDx3nvZTTE3t1DsIl2G9VcTCtgU61lhCnQRNBI4LH67XzUUrLsBFS1eSklXZqDfUL%2BfD5nDNCbF5DDiwdrcv8jTArIB5px8TBi%2Bj%2B9zohMo4KY1igXZbTU%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 236581\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":236581,"size_decoded":237395,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1200, components 3","md5":"01ca66da71d068d50c3ce1edcc629c52","sha1":"a8b0baabf1ad8336a4612daaa7e05255ac8c965f","sha256":"a0429ea869313706fb2394c01bea2dab6b7a9a3efc364502c14b61b146773252","sha512":"013497d7412af4842471a1a0a37ff98aa7e8cfdd2950fbff5d0e2d466d82fe8cc94b860c88e00d23d3f68190882f0ede2662208b2fe29f0b7d13ceb4e583a808","ssdeep":"6144:ZfKE1dYIuFyNIdu15MrIUSv9kRgJMB4WfTW2jTpaI2LLkoftcsL/:vUVFyN5vMr/Svn+B4wi2jTBWpftcsr","tlshash":"103423e137fa4211883d4eb93140835996a2648bd90b21dad2c30e6dfcfdbed95ce127","first_seen":"2026-09-03T18:56:05.952652Z","last_seen":"2026-09-03T18:56:05.952652Z","times_seen":1,"resource_available":false,"data":null}},"time_used":331,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/indian-tea.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.578Z","timestamp":1788461707578,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/indian-tea.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7885b9ec272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb3a-3b91\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:08:58 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PsfrhABdUQA6R3%2F0QYIlLc9L18RMl3f9JJcTjb0RNnUyc22uZgTUyBUveb743%2FDARe8zczWekdGcUmpKEpDf0AjvWIdfWA6GqyzCfbUFFBbNWo9eKcFCcYnkJmhaTd2VtKc9pLA%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 15249\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15249,"size_decoded":16057,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 500x325, components 3","md5":"e5c4f030df34be0a60b99caf2949b777","sha1":"12908d28201c8c7af754133a8619cf75b39d51c9","sha256":"186eee2fe38c5e317fd511a1fdd7c9498598d44c29f5a9a16db339ab2603693c","sha512":"ee23928e0819e4c154d7d9c3675ebaa40415e6321dada9052feafb7b1b3c45e6d90af2a7df98ccaf4dd2b7cad2f4822ac13d3b3225e372225d3ac24fc99f7b30","ssdeep":"192:ii3u2aFXgP5f7FFwxCpUqVcadQBVedtofV+sO366ZrSUt0q+g1E1cT7qhswGaSI:ixXgPJ/wAphDeYd++3lAg19qhs4SI","tlshash":"ef6227035855cac2f50dc7e9fe830ce96e591729f18b3efb05a11fdab9105a78c8a12d","first_seen":"2026-09-03T18:56:05.953598Z","last_seen":"2026-09-03T18:56:05.953598Z","times_seen":1,"resource_available":false,"data":null}},"time_used":211,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/nasto.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.581Z","timestamp":1788461707581,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/nasto.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7886ba1c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb3e-e6dc\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:02 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nA9XZMlbsJetTrOLFAns2wItYrp3N6p%2BeWmGzA8PId%2BUUzN6xrlA2tS0IsSr4NPTHyJV80XwQKRHs3%2FX7lKyPQ4nZC3E3kcd4ERWZ%2FWmowojxp8HRQsvejhWTA%2B8JrRZLafaFsA%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 59100\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59100,"size_decoded":59914,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"*\", progressive, precision 8, 800x600, components 3","md5":"66ae99b01b2af3076cd9be937f710350","sha1":"86ab762553791d8e1b6569e1adb5c98fdf7abc7b","sha256":"3260d1a56da6eb45a639f7965e05c1df92d80bce6b09be229d2d86792fe90ff4","sha512":"df0b529ed5e0c5aedd350d66f157bf51551ca581233ba8845da7c532718f88b5444f6953fb0abf75c317983903cea753e4f3a910aeae5367372db870eb470793","ssdeep":"1536:4fSkjOPi+5/9rAD8kGRu239W4WrCWFsdA1saA6h1gfFgD:sEie+87u2QPCDdA1kYqfFc","tlshash":"e84302d9df3bb89af4555cbe3815873b6e10b92853b29b51631c7a338c3e0921972902","first_seen":"2026-09-03T18:56:05.95468Z","last_seen":"2026-09-03T18:56:05.95468Z","times_seen":1,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":49,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:08.123Z","timestamp":1788461708123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bansuridabeli.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 28 Aug 2026 18:08:07 GMT\r\nexpires: Sat, 28 Aug 2027 18:08:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 521221\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-10-15T04:33:47.898176Z","times_seen":571467,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":23,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/BansuriDabeli_Logo.png","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:08.365Z","timestamp":1788461708365,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/BansuriDabeli_Logo.png HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:08 GMT\r\ncontent-type: image/png\r\npriority: u=6,i=?0\r\ncf-ray: a356f78d4c76c272-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=31536000\r\netag: \"68dacb30-110ce\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:08:48 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EVeNcPPv0qLEZJVoE%2B9zkuzjwV30m8XVY8iwPIYubbjVni17Cw9RNRbgixUVvh8jtblKbyj0VAYIfe%2FhvllHFc%2FJwpVRWdrFx75Qk68%2FEc54tQDHabWVq04lmaQAn0WBzkIpnBs%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 69838\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69838,"size_decoded":70660,"mime_type":"image/png","magic":"PNG image data, 567 x 255, 8-bit/color RGBA, non-interlaced","md5":"f27351c79fc1310dc342aba08716546c","sha1":"b78b9cc7eba027f1394b916bcd7aba1dc3e22c16","sha256":"f4c6b0b4afdca2458d3daff3ffa010a1faf205ca45bc2960e07eaaef174d8227","sha512":"c2f57d9668c6f4e28140626accd37ace367475e5e8b2a9160b80fc92728a12f5ea73cfe79b7e4d2d4a151ed84f97deb72039c0c02b6967895f01dad0e433f5ec","ssdeep":"1536:DcOt6uS3/2SoVF5ODbsH1HbeBzskNA/4N:DcOtXS3/29XWsQBzskQI","tlshash":"f063f1c87411bf923746f423536a74e6ec278c97cedfb49e660e906723794b286260c6","first_seen":"2026-09-03T18:56:05.944148Z","last_seen":"2026-09-03T18:56:05.944148Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/pav-bhaji.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.547Z","timestamp":1788461707547,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/pav-bhaji.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7882b76c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb40-42eb4\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:04 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HqsYY9xPScY96G9DBJh53J5duaesa%2BNEHXBvYwQWL%2B63MwjdQfDJYcXyUspRyh7jusC%2BUW7n%2BT0UsMMhVQf4c3%2Fbj37HOFWaIcDUTHmGSzljHQeZVLQZCENjg1plVR5hb1pFD30%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 274100\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274100,"size_decoded":274916,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, orientation=lower-left], progressive, precision 8, 1200x1600, components 3","md5":"f22cb62706d2eb2dfb88221bec64b782","sha1":"971907afaf0cfc7255076e8680636b4ef4343ce6","sha256":"59415005a33bd21fa54cc3f2b05d8b18244a0559afe01cc953c3ad59d48f97e2","sha512":"67f35a79aee0febc56d2f61e68a7a486b0c18d4d00da8f916cce198eb6d1e0b0d15bb38f391a74c33545cb792f709a63e0df5d10f191904ec7ee83ee9a161ea3","ssdeep":"6144:bsqZPqgiSh3AVpGDGd1S3fbGuwDfiN8uzP:bsq9gShUADGd1STGuwTiN3","tlshash":"ab44231e8a18b78adad664f341408da82c3cfb06b43f8e99117c81a45bc3f9d57f98d4","first_seen":"2026-09-03T18:56:05.956262Z","last_seen":"2026-09-03T18:56:05.956262Z","times_seen":1,"resource_available":false,"data":null}},"time_used":345,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":144,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:08.129Z","timestamp":1788461708129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bansuridabeli.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 116621\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-15T04:30:23.586772Z","times_seen":316910,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":54,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/pani-puri-one.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.561Z","timestamp":1788461707561,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/pani-puri-one.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7884b8ac272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb3f-5d4d\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:03 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=maY0JA2kxvXNqCK5XWQBwuI8pGdyjlafinaTKnMdCU0OoYeN320suCk8nS8J%2BE4BMn%2Bw7hQJ1bPP5vG%2BzNAtNq0gxr54caHsjaJA3TmusuctRBd9JC%2Fg7Lpq%2BMq5wVrq6UjTKRo%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 23885\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23885,"size_decoded":24699,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 249x173, components 3","md5":"f8669b198a60187759263e06f293e64a","sha1":"10d52f1875ce18256ec6745c89dae1fc6aa4399d","sha256":"9698c0594bced4510beb3ab8feeaec418a6b88bc233f3caf7f1590627cbf8dc3","sha512":"3aaafa28b7ec8d63cbd0fe97be61cd2b836370b9fd29a12f3c4984e48f79a4299df7dedcbea2ac1ab4127dabd77e333f334d529544f4a36c1199d36f4611ec5d","ssdeep":"384:n0oXgv8+COtQsP+W3X3K9s22mjqa/LWi4hlpE7hG9mxl4bpOSy2PFYGFhbGu4u2C:nME4Bx3HK9ao9/LaEG9mPP2PFYGn54up","tlshash":"9ab2e1f6d69170d4b00f4df2b565b9f0f2f187336c86a26ab0b1cd31e94ab851a31436","first_seen":"2026-09-03T18:56:05.957678Z","last_seen":"2026-09-03T18:56:05.957678Z","times_seen":1,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":136,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/dahi-chaat-one.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.564Z","timestamp":1788461707564,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/dahi-chaat-one.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7884b8ec272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb37-81828\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:08:55 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cXLSk%2BK8rqfsQObyhWJAQnpTzPCWdpQniMf6T8EQCsws6QhsdvobS4p9cRxVXZRT8%2Btp7r1BqptbvWyYR0dCxR%2FvNiBgtnDpHRyQp3hkDHaTrDrowpE27AKYhlLsOyTa4%2BdAAOI%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 530472\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":530472,"size_decoded":531286,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 96x96, segment length 16, Exif Standard: [\n- TIFF image data, big-endian, direntries=3, orientation=upper-right], progressive, precision 8, 1536x2048, components 3","md5":"776f1761ec24969fb82aaa48c156407b","sha1":"b490ac660fd637c86ad2c7a085347f065832cc54","sha256":"58196127dc099ec05c7b79ceaa9553e1f181787b1e2ea4591ac1ba7e7074a62c","sha512":"324da5b66c75e2b41ab1d329043915b4468d0e088f344f88102e8cc13c92daefcfa58fc696aeff3ef2b40b6b1a55ed006e3e14f218f35f39aa721e33ad8e40c4","ssdeep":"12288:mM+88B1jE6HvT9yiy8u0dRgbD9Ov7sFim6PEaVocS+dW5+Mn:mM+8QHRVuiRgbD9Euim0ZecSX+6","tlshash":"72b4232c3c5912a6e0eee7358544a0e6eccc165d8b704989f38cd2a5eb7cb504db692f","first_seen":"2026-09-03T18:56:05.958861Z","last_seen":"2026-09-03T18:56:05.958861Z","times_seen":1,"resource_available":false,"data":null}},"time_used":369,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":176,"receive":193,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/nylon-khaman.jpeg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.572Z","timestamp":1788461707572,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/nylon-khaman.jpeg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7885b97c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb3e-5b539\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:02 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lLNKiKgMu1031WXjh1iMLaGjQ87hUg7Au3v%2FU0omBRCeWis4RQKti0thzTyfS%2FdkvFdhm07gbudhNhHhfXCI5jsKgU4JwOGsIYM4UPwYO0GkTk%2BDRaexxDqMnbuB7%2BNbq8vFxxU%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 374073\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":374073,"size_decoded":374887,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1200, components 3","md5":"2f75f60397da04332902024eb1730277","sha1":"63a0f277aa7184782e617c1899d7df083ca45e90","sha256":"c1260619ab4913944aaf13e50d9eb3e2ab0ce1aabf1b8a56e2f655cc552734a6","sha512":"12d037c69f1359ae893803de36a2f41a24c77aa630004f7eadae36e0ba270081ef932df7bbcc724e693410bb7db2673e102dcf2a2c363a02552e911bed37acbe","ssdeep":"6144:Ft28CSGUpVyB9xGUHUhL67aRZAiOx42neH5MOT2myZZ4JP1yLi9E6tzuhGLN9g9j:z28C+amUHXTiOx42gPbMUNyLh4zuhGZ0","tlshash":"5a84239673c4cf4266fc81490bae72796a0eae72a949d1cc54cf0399cd7e3877183297","first_seen":"2026-09-03T18:56:05.960087Z","last_seen":"2026-09-03T18:56:05.960087Z","times_seen":1,"resource_available":false,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":168,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-03T18:55:06.616Z","timestamp":1788461706616,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-proxy-cache: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RlnNGrfZnDU8ORFVSpTYOb58zSSlpqGHKyqkdTNJ%2B64T0mhqWkDZDG0CS4LsQpR4INdzg4cBIMw50wOOMSElRbu24%2F7lap7Nuu5Yx7h8XMfoQGA2zLBJVNXQU8IN9fyn%2FJh1am4%3D\"}]}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\ncf-ray: a356f782ca7ec272-OSL\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nlast-modified: Tue, 30 Sep 2025 15:03:55 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-httpd: 1\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"jQuery:1.11.1","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery CDN","description":"jQuery CDN is a way to include jQuery in your website without actually downloading and keeping it your website's folder.","website":"https://code.jquery.com/","common_platform_enumeration":"","icon":"jQuery.svg","categories":["CDN"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59944,"size_decoded":10343,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (495), with CRLF line terminators","md5":"e08bc1314487237c6b642d9b23d762b3","sha1":"65241d6730209c44012bf9790f3eddc82ba8900f","sha256":"2acd83723c58443f45786320516d514a4f2e80a1d3be2444fda2e4fdff7d3bee","sha512":"7c24b33f1ceb715eef71f92f3b17ad87cf81d1d495ba730d559825cdff35edd3029fe682723bae9959968800d4b742389c118440acaed970a879c3d21f2055b9","ssdeep":"384:sRcmQNDT+9A88DSd00P0kB5goK5lG6pI7q8W08whLSIi8vKjXA3S2nvEhjwhmvP6:TmKKHd0Mu70xhLSIi0C2EhbHuIk","tlshash":"7e4347a120c02933d17381999a6957bafec1a243d65e960532fd3b8b4ff3d26cf97840","first_seen":"2026-09-03T18:56:05.961462Z","last_seen":"2026-09-03T18:56:05.961462Z","times_seen":1,"resource_available":true,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":48,"connect":18,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/paneer-spring-roll.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.571Z","timestamp":1788461707571,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/paneer-spring-roll.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7885b96c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb3f-10f1d\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:03 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=md1iuozFFxOx7RIubj2d%2BTqb3pbpRf%2BGsAF1faTLt2EI6mJ0w96meqQLY2GS7tBJuldY8qnAHrMP9quzt2XMniezecW%2BFdwOTub68tAmuwGUxd5AkjIdpp2LiCoCBP1faisqvrU%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 69405\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69405,"size_decoded":70216,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=9, manufacturer=NIKON CORPORATION, model=NIKON D3200, orientation=upper-left, xresolution=152, yresolution=160, resolutionunit=2, software=Ver.1.01 , datetime=2020:07:28 11:10:58], baseline, precision 8, 500x375, components 3","md5":"e70a8c2ac4901a1da4cd566b8ab25c5d","sha1":"242a7614f23278f5e74f759a9af507c3ba01db4d","sha256":"913baf2902f4b5d066fd23c534de8b68ec21b265daa8ea04836f9666911c2963","sha512":"a3b1b0e22ac637d80066930c6b78d49eaa1d2a70a9352d516a549db2577ce368c8d244d0045aa1e3cd90346c9ea91fdad1d23aa9946181af9a9ab3ae03c8b1b3","ssdeep":"1536:7ZbSZeLdkN+qQtL42SHfIEVb1Ck2GnBQNnmaBjAa:7Z8sdk0fafIEVbQk2GBEAa","tlshash":"026302ecb8607461e8d1403b40efe7db63254490e5226fc2f67dbb5d4b5e2e18a3922d","first_seen":"2026-09-03T18:56:05.962701Z","last_seen":"2026-09-03T18:56:05.962701Z","times_seen":1,"resource_available":false,"data":null}},"time_used":205,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/orange-juice.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.579Z","timestamp":1788461707579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/orange-juice.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7885ba0c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb3e-2173b\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:02 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9KomgpjGvIgTcmpPUlbOCg9j28i25BcT8gALWkoShaJtQaeXd8cKaDiKrclTUAUQSwqPpciDCLJD0aqt52JHkhvqBiG3dUsa77fAL6S4Nm7YyQ36E7dx6vdvwa7RtzjkIkE8zhg%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 137019\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137019,"size_decoded":137825,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1500x985, components 3","md5":"f9627c925e44d063f91576b0c71a709b","sha1":"e4ca0c92d61f1a239e45bdb7a29dfab7dcc33502","sha256":"c48fae2ed72102a872b290281cc9381dd6ca483f5f0004aca8186fd977e7cba8","sha512":"e6a56a06917c43e90f3d3f7f662af0d48ab0ffc5755e41b41ffc9a8c1c140c1ea4499f383f6ce9c1dc30ff45bee33d7c0dca14f42c5c79728541dedb98a04626","ssdeep":"3072:TP3JM4oKjNvoVX5Dw/BJJeStFhcDByW8fMK3j9hsO+dD3y:docaDw5O4fNjgO+de","tlshash":"c1d3125774b49fc5d0249db3b0d3ae8967aeb825f0232b94e67e6ee271034cd53b0606","first_seen":"2026-09-03T18:56:05.964104Z","last_seen":"2026-09-03T18:56:05.964104Z","times_seen":1,"resource_available":false,"data":null}},"time_used":300,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":118,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/dabeli_cover.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:08.135Z","timestamp":1788461708135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/dabeli_cover.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:08 GMT\r\ncontent-type: image/jpeg\r\npriority: u=4,i\r\ncf-ray: a356f78bdc28c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb39-508c49\"\r\nexpires: Fri, 03 Sep 2027 18:55:08 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:08:57 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DxwcqlLIoV26kDXT49QWdjjDZl63AG5n9Ixso5IPXHEz%2B3tC%2B20Qo8dJ6reuluZa9plsai5ZLPGxYK7UCnGavEZ87sWUELKkWH0zKYi7s%2BKJa8Uy5U4z%2FcIZ%2F1ZlFWnvA7x%2Bcu4%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 5278793\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5278793,"size_decoded":5279613,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, yresolution=158, xresolution=166, model=SM-G998B, height=3000, manufacturer=samsung, software=G998BXXU3AUE1, orientation=upper-left, datetime=2021:06:24 15:30:35, GPS-Data, width=4000], baseline, precision 8, 4000x3000, components 3","md5":"8dda4364016ad3ff2e406ca8e54fd373","sha1":"5c9c159e94d5f9be97fff409d997a8f595304216","sha256":"dac29129377d0d021f796301e52dbe80c5641a39db71c8263c83d285e29609f4","sha512":"a184263bf4a211492ee9c96043a532181cc02f75633e723a871638951c431c217c6b2af15361e5347683f63698a3e1b42dceab377fc108cdc8388f1da8162f51","ssdeep":"24576:ce5yimxgoqXCNb6mZ2o7eTp88oN06tkUqCwGKfij:c/imxiyN2mZ2oKTS0ObqCwDqj","tlshash":"88253328765baf2acb012f784ee7ce833ebfee1b633f574554d0a85937900540959436","first_seen":"2026-09-03T18:56:05.96537Z","last_seen":"2026-09-03T18:56:05.96537Z","times_seen":1,"resource_available":false,"data":null}},"time_used":438,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":142,"receive":296,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/chinese_bhel.jpeg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.548Z","timestamp":1788461707548,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/chinese_bhel.jpeg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7882b78c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb35-50552\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:08:53 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Paf1PguzJJFr9ZfqdhqTvYxEC4Oc2pII%2FAmUmOnlSVSskXHY5HjD4613O7bb3YY21RrYm%2FS%2BoXTPJfUn1DTdVcabUigLIWvyfgWnW92qqnIjsKLXArEFnqf3OcDi7rTueUBLkX4%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 329042\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":329042,"size_decoded":329854,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1200, components 3","md5":"b1626c5ff68c588a54902c5b5d700f3f","sha1":"84d63b9bb29bd667f036070ebe4fb101f88be544","sha256":"08dbd8527add726a63bf801b2941ea590068b9edfe683edcda57f8474deef22f","sha512":"ba71b0b574585eebfaf2ae11ef7e444c46c614fa99e7e1509e24a929c92de53e84036b8cd15ea8eb3a8886780578f7561a46e8dcf4aeb00624f81f4d9861d324","ssdeep":"6144:MxpktM4DrYF6tDfsYxjKX5az0Oe1PAyPFGGr3H//P:GktMIYIt8paTeKQpr3/X","tlshash":"4364232167d5fd3a9aa3c2fdbfc4d1e07041e286fb5c4dc703c611519fa96ac5a8ab01","first_seen":"2026-09-03T18:56:05.967574Z","last_seen":"2026-09-03T18:56:05.967574Z","times_seen":1,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":171,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/Shezwan_chilli_paneer.jpeg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.553Z","timestamp":1788461707553,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/Shezwan_chilli_paneer.jpeg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7883b81c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb43-5005e\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:07 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=llAZrk4ztTem4t3vbR4OIs%2BaJ4x1GRqB7%2BhDShpeJ4sXR76a6g7e2F%2Fk1CzJ5TIDV7sKoCQ9kPAv3jssYTwtKuwWSDKSWVQ1MeesQeE%2BZN0cpwQvw%2FsCJyQUA7J0M5x3E%2BTep9c%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 327774\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":327774,"size_decoded":328592,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1200, components 3","md5":"e2c5e88ada0bfae74cc97032b07ac194","sha1":"8a4bfbf65797dcdb3992a40ebe29b96953fab3d9","sha256":"a8e11c244791a8fa5368d7a9d60fce37526d86f83dc6cba6036176e5ca7ff053","sha512":"f7fa0b294bbc52c4146119f9da4981ce5f9dc99ca9ac56dbac909ff0ac52b806a5d50c906ce6ba5bca58b9d1e7b039121885555380367db4b50bbd1b459b4fc6","ssdeep":"6144:v70+hQOZZyRiqtG+VmpdXIbBx78X3pxEUDQ2S+gxaCb+M43Ur7SoD5Yh:v71hqRj4HXS6xDpDgxxi33weIih","tlshash":"426423430b87b5bcfb3144b60f977dc4fad70b1a081aa2274d4a06b8d31de356a23762","first_seen":"2026-09-03T18:56:05.968917Z","last_seen":"2026-09-03T18:56:05.968917Z","times_seen":1,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/css/style.css","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.509Z","timestamp":1788461707509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /css/style.css HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WohNfaKYfBZe5qo6Y5Pc6lYs3Vi3k26G7or58of3Sxcjt%2BiHXUyf5tgIDB9uERvgpHzmjFgY6ls81BwOzQ581a4FwOu80s1BySvye%2FtHk4YJH39fGU943vMl70Xip0ZlErMClaE%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a356f787eb59c272-OSL\r\ncf-cache-status: MISS\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\netag: W/\"68d18f31-82a1\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 22 Sep 2025 18:02:25 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":33441,"size_decoded":5782,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"8fcd3d986f186c79ccd55a311ad7594e","sha1":"c87612491a14002739a3af99dd32d830935b5903","sha256":"f0294d2a00dd61184970d0f84f3c0ae356f76c3b6c9ee25fdb4e241590e9be24","sha512":"7bbfac5721a5891f8c209fba5988bb31a4a793e0daaa8d183893a4702509ce295f992a0fbdb0c322ff5a6d3f3bbfbfcc0f04bdefbfd52d1baac40544d0522843","ssdeep":"192:hChjPiBcAWKyK/Z2NGigV9xPc41PHYe6KCSEKQK4+9u+uguKvKGKZKaKK0Onmntg:hYzKJImB5iV1C6","tlshash":"0ee255884a11550495339ab9efd2db79e7a88013890307bafbd39402dfd27b853d6f8d","first_seen":"2026-09-03T18:56:05.970266Z","last_seen":"2026-09-03T18:56:05.970266Z","times_seen":1,"resource_available":true,"data":null}},"time_used":210,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":210,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/pani-puri-two.jpeg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.562Z","timestamp":1788461707562,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/pani-puri-two.jpeg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7884b8cc272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb3f-9a479\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:03 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vzf%2BMTkcxP1uKykf6lV%2F8mY1Nbm1pOPrgYFBdE9f4KupyhmimswNk%2B8KCSevuR4GVoRghwM2Fc3x3qRjCE9wdu%2BHLY27ekqw9GTXkGB0xoAa%2FTJwUPpD3p9EzprYw13AxaBhK8M%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 631929\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":631929,"size_decoded":632745,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1600x1123, components 3","md5":"1e1d60ba12598c2c13f7b399efb5e9fc","sha1":"87709dc7433d459237fe632e807057401f1c4473","sha256":"a1751ad3c1796f5b62c58a6df0eb18c358f561bf473403ed683e790d969b95d8","sha512":"e759dfd7e16849c6c07523a99fa2ede2f336a19bc093e79f8bb8a923f45fe63676d6827c1922270ec31a338a92a9e8772fc7ef9fbb9a872b6bb96b8f88c76e67","ssdeep":"12288:00hCw/VN25BemO5GUT5klKLuhHXXnJ1fMf8vEyfEo3UVtshe:XCmT2XSq71XW8vPzAtH","tlshash":"1bd42337fd0d319a30adc15b05b74e02eb6e46a275e5cc086aea03625dd3e91cf5bca4","first_seen":"2026-09-03T18:56:05.971554Z","last_seen":"2026-09-03T18:56:05.971554Z","times_seen":1,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":221,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@3.0.0-beta.6/dist/aos.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.642Z","timestamp":1788461707642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /aos@3.0.0-beta.6/dist/aos.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: text/css; charset=utf-8\r\ncf-ray: a356f788cb2c5697-OSL\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\naccess-control-allow-origin: *\r\nage: 484332\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Thu, 13 Aug 2026 15:52:33 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:hpX1/GTWVZP5djpbKNFLw048+AIxfh/60hJafI/t+v4=:\r\nfly-request-id: 01KYJ1R87SBR63XX4MC8WASXGK-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28765,"size_decoded":3288,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (28765), with no line terminators","md5":"6bb5545318038a2cfb38a19581c581f9","sha1":"9a26a349d21a4b871f45dfd124a43fada4f94b98","sha256":"8695f5fc64d65593f9763a5b28d14bc34e3cf802317e1ffad2125a7c8fedfafe","sha512":"8681a53beef57d21ba9604bad08e1b2afb05541f9b027ad5143625c125e8c8d2e9a43728ba9c0907b29b5aaffade20022a7de07202bd8cc5ddf93f980de56b19","ssdeep":"768:CdJLh9C9ZnOrdFGJtrSb59qVZx1GrdF2JlbiLRdtlVt4lxhKdvJg11NeNP9QNB5h:CdJLh9C9ZnOrdFGJtrSb59qVZvGrdF2H","tlshash":"a4d2c29a794cd100bf431b4762df2a1859347588e530098abe3f35ca1cd2de6b973fa9","first_seen":"2023-04-05T22:57:22Z","last_seen":"2026-10-15T03:30:21.462012Z","times_seen":14704,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/shop-front.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.532Z","timestamp":1788461707532,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/shop-front.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7881b65c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb44-201e2\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:08 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fsb5U5afweb05Tq4ZsP%2FyCTglQ9CvQ2QLITljlNBVKXbynW8ug%2Fo4RrnMg%2FT1kjvlzL5iRK2QW8Va1R2LgmtQ2PQEqy1mU9ddI0Duy4IxDH5t8X6yTrlwp%2BVWXiXMW6qDxXLWhs%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 131554\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":131554,"size_decoded":132368,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6], baseline, precision 8, 763x561, components 3","md5":"afd5a4da4bf86661fef509ab897fb282","sha1":"07be810925f6c8a3d75d6568cfc41ee491b0b299","sha256":"b5c2b4e524e195476c5c61cc8a082a8b206070eaa3c4eda5a01af09eaaf677f1","sha512":"7dba21a5ac5ebc748bebfd36e9aa39497625ba432c364a8297d8ec90527261c0fa4b1feb7884fa66543356139e19e5fa209e19f82fa2d69aa4dec568249d4a77","ssdeep":"3072:KLCo+d28O1s9BPHcpSxIBWqat8aGqr0U/:GHadvPcp+8ur0U/","tlshash":"57d3f109a92131a0cff24db428198c5e01b5ee666ce71d2d753f482abfc27e35c9169f","first_seen":"2026-09-03T18:56:05.973422Z","last_seen":"2026-09-03T18:56:05.973422Z","times_seen":1,"resource_available":false,"data":null}},"time_used":178,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":86,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/mogo-three.jpeg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.552Z","timestamp":1788461707552,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/mogo-three.jpeg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7883b7fc272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb3d-53454\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:01 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Qwfb7CWRv0Ue2T%2FDS%2BKn8GKOZTTeXlLRLC7RqH65Pju64QtjLiYvEeyXz9VWdUWzcqOYmEGTwWsBkOVyusZdQ4LOeXqPp1aQT%2FDxRxZyjxvLD83VWbh6cJ18046%2F0l0ibeLBoiM%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 341076\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":341076,"size_decoded":341890,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1200, components 3","md5":"499952b08e4ef877ea01373112882749","sha1":"415dcf9806ccb3fa62f9668d91d81b2e9b6c1ab6","sha256":"df5502625fd48221c87e19628d32f4b551f65ecc7a7885ada0f66f076025c420","sha512":"b112a2d844b4ecf8d13bc22f60af585e5f66ce1b4acba16e6f57a9165ed41a51bcc9c396acd794fa8e86808ba8fdfe57ceed6206679064580413feab90760087","ssdeep":"6144:iywTOI0hfyint2VXCqg33+zhleHa867x+nF/n+bMm314IeqhPSJJm/0fAZ9G1puN:bwj0hfj8xNle6NeWtlftkJoljG1pbA","tlshash":"9d74228cb0761f75fc6ea7bdc5b6f60e4ba5044dc7268b1e69422ee0b235439870325b","first_seen":"2026-09-03T18:56:05.974617Z","last_seen":"2026-09-03T18:56:05.974617Z","times_seen":1,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":187,"receive":163,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/breadpakoda.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.574Z","timestamp":1788461707574,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/breadpakoda.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7885b9ac272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb35-824a0\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:08:53 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=x05N%2FuzGTCpFK6t9b9Rw9XwT9VuIecKmnc48cFoMn1q3v0V0Cx2BBJNMyK7scc1HMYYGcU%2BB0xX4JDdzL0TeMKQKeCOv7iC26vjsp9BaChmWEifuIYXNCU6BM4wd03cJlUlEWjU%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 533664\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":533664,"size_decoded":534474,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [\n- TIFF image data, big-endian, direntries=3, orientation=upper-right], progressive, precision 8, 1500x2000, components 3","md5":"0dc655f71bc354d7ecc28d47126f05cf","sha1":"3da1b699bdc10025f2d76ef763c9e841cab114fa","sha256":"80e767b4544934d67b18e5cd27181277c7081656a64ed291dadc9df42f9214dc","sha512":"d4eb7ef1277479ba1f468bb710ad827e2e5c621d06b187effcb4faf654e5bf0b35756accf22edaab0c8b709232458f70c9726855aa8dbc6e1febc9ebdd79224e","ssdeep":"12288:WVF0QP6NWQaRPS4i8tJ4UtVW83yDoBx+0f1KddEM/5kot00t294qA:ObSYdSfEJ4kVW83yDU+0f1Cjx00rz","tlshash":"47b423036162b1faee3d42b0864a3264f2b84b311bda3571b41c5965e30fd6ed13b7a7","first_seen":"2026-09-03T18:56:05.982961Z","last_seen":"2026-09-03T18:56:05.982961Z","times_seen":1,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":205,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/nasto-one.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.582Z","timestamp":1788461707582,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/nasto-one.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7886ba2c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb3d-17b8d\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:01 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MBZOFaa3VOw6ePHoEyO1E8bNOAgNBNwSXwQmzzkSi0O%2Ftz4tFj0%2Bfzu46RnDpRj2o9OrWkJvsZaf8nVxR7IHz%2FEss79aD9bKqhDYRjmgRS761OAciUCn6NWTRuF0eHMoZxDBwOs%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 97165\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97165,"size_decoded":97976,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"*\", progressive, precision 8, 960x720, components 3","md5":"aefc72bd3e6405dc722d9891897b46ff","sha1":"a75d75ff1dd9ba1230a2da628bf97ae3ce679e85","sha256":"e14268fb421da1be7578a8619a845caa640f42b51957b20a39940253117e3ebd","sha512":"efa7e0127199690f82ca120cbeedc4d71ff8ccb06212d50264b3f50d2d8f1ec65d692d8cac0dbca34a396c82e69586785b95d8f7b10ee3db67c83fc79faf41de","ssdeep":"1536:L3rAXqLSIXRxhyLdtvNkI8sQahRXY3AiLpwxPbOkU+NSOFRXwf758g7rWxusgHA5:Lk8hyL5tFRoTdOPblNSO3Sy1ngg5","tlshash":"5793020f62d217aacd1136bf62512be53328b080df0d66a299a6c5974d2e5f7cc312bd","first_seen":"2026-09-03T18:56:05.985382Z","last_seen":"2026-09-03T18:56:05.985382Z","times_seen":1,"resource_available":false,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":67,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/nasto-two.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.583Z","timestamp":1788461707583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/nasto-two.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7886ba3c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb3e-19d6c\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:02 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0TLQV9ME6fyJQoEapTbVyu7RS%2Fr5AcMbNdFe4Od6SBLWEzxbrUB3JW8MtIkrOPYi34511D67bxMQ8v7Ls8I%2F0L6nSlw%2FIhqHluxLlEtfH117RJlnfgtUvoFfxVLseQ1PsKw%2B%2F9E%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 105836\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":105836,"size_decoded":106652,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, comment: \"*\", progressive, precision 8, 960x720, components 3","md5":"c519d660a323476ff3e10f8b16bead56","sha1":"38513f383461fda5eb74b941e7ff7f75fcda5865","sha256":"18574062a5ea4ead6690c28abe4a4cffbed87dd9e3dae8c449c5afcff48957e8","sha512":"96ec71d272961f47c082f9fb1397b879ea29dbe6cfc8df9fc99708a68e455a191b1c952494c043e660daa59a65b2c55d8b58b31e01a277693a3c05682c2f770e","ssdeep":"1536:O06QlU6bShbYf6Pg4MYvL8R6my37GG/Hw508c9xIE6o8SWNWT5cF/Ceh/fSyEOuL:OLQlnOE6I4Fi6mY7ZQR79FaehSyEFKm","tlshash":"f1a3128f0bce8ca4f9d87f7e943d8a814dad9d351c28591b2b93156be6d03e13f64844","first_seen":"2026-09-03T18:56:05.986725Z","last_seen":"2026-09-03T18:56:05.986725Z","times_seen":1,"resource_available":false,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":207,"receive":69,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:08.118Z","timestamp":1788461708118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bansuridabeli.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 116621\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-15T04:30:23.586772Z","times_seen":316910,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":21,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/SchezwanPaneerRice.PNG","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:08.132Z","timestamp":1788461708132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/SchezwanPaneerRice.PNG HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:08 GMT\r\ncontent-type: image/png\r\npriority: u=4,i\r\ncf-ray: a356f78bdc26c272-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 0\r\ncache-control: max-age=31536000\r\netag: \"68dacb43-2ce07\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:07 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ff2793EjrNImbh5qq0lfvALtagWfNoMroqBacLMlQwztAen%2BCw%2BkO2fTxdpiveb4evTV3IStS6PRwowA2jG7j27lahrVTACuzaUVXeKvoxGFOWTNWd%2FKw3jEgjNE%2FB%2F%2FQ9B3FvY%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 333517\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":333517,"size_decoded":334341,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T04:37:27.151429Z","times_seen":19113866,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@next/dist/aos.css","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.510Z","timestamp":1788461707510,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /aos@next/dist/aos.css HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 45\r\nlocation: /aos@3.0.0-beta.6/dist/aos.css\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=2,i=?0\r\nserver: cloudflare\r\ncf-ray: a356f7880a1b5697-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T04:37:27.151429Z","times_seen":19113866,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":4,"connect":15,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/oreo-milkshake.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.579Z","timestamp":1788461707579,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/oreo-milkshake.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7885b9fc272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb3e-11090\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:02 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2lzbth%2BlRkXcFjIvnlo8Y2IfIkF43SDb%2FBH%2BvN2e32B5DBRGpCBaGk%2BXQFcrDzbw0rbnFzcN6qflHNCiTm6q2QH21Bw2JfX0un3l%2BxhgZgGbmTEsMcQhVLuGIaLUg3B1VGjHpDo%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 69776\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":69776,"size_decoded":70591,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 870x565, components 3","md5":"19c9bbce081927f8c93303558b4904a6","sha1":"5aea83dedad49a1dc9e969a9dedf4131cd1e0655","sha256":"a49a7a4600b9707fbb1b4392495bde3d8b3d943849d6aa58490a07f757f8907c","sha512":"c646599fa0a20e43aa42afa7c7bba7d99c68f56cf8a42c70dda297f61a5107e18523914211a02b4f452865f539451e41821d16b5c184c2da982886869e1fbcaf","ssdeep":"1536:x0kJziH25Ri7vOo/gBjF+R2Mo2aJIQLRFQ5ZX9XLlX1jGn9Y1n:3mH25Ri7vd2z2a6Q3Q5ZX9XLNhGn9YV","tlshash":"906301d23225b499f73b69ae22ce31dc3512de355dc3d02494019e0dda1b932ee8b6ad","first_seen":"2026-09-03T18:56:05.988064Z","last_seen":"2026-09-03T18:56:05.988064Z","times_seen":1,"resource_available":false,"data":null}},"time_used":227,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/clock_trans.gif","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.586Z","timestamp":1788461707586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/clock_trans.gif HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/gif\r\npriority: u=5,i\r\ncf-ray: a356f7886ba4c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb35-457c\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:08:53 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1zrDHzBgDOQK5klvxk9weSiQyD2K2ua3CQ%2BZwE5BCbHs6Kg%2BeJJJLk9l7dEWQJEtCYqmj47O1bC2LUtAXgD7AfvKY9KZ30hoCZnZUO%2BpB7AWNQ3ppptPqWpi%2BK%2F6PctPJ5wpuw0%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 17788\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":17788,"size_decoded":18601,"mime_type":"image/gif","magic":"GIF image data, version 89a, 72 x 74","md5":"73ee08a49d3ee6842e898deb4fbc4ecd","sha1":"69437d98667dc10a7696c87cd052fc7971a0a792","sha256":"da32a197d9d6fb66ce632eeed1bc9559cc2462b9c85329f11cd117ea6730827e","sha512":"cda327895edcc5b8e28a00ce4e25b4b6b3aedde30a1fddef6c13689180f70cc5ebdb114c97cbbf479fee8ff88b0a5cf11a7a914e927515b32c8233f646e9a0a1","ssdeep":"384:fn+TFznQWwonNcwPnv7+nTLtnYBni2dnrGnpNfnbe77:fgBQWfNVva/tYBiOrGpdbeX","tlshash":"48821ab0fa99474b2efb66a5c960af604fd41e1c06f65a0eb13d37c002b5b885e3c579","first_seen":"2026-09-03T18:56:05.989193Z","last_seen":"2026-09-03T18:56:05.989193Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/ManchurianRice.PNG","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.557Z","timestamp":1788461707557,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/ManchurianRice.PNG HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/png\r\npriority: u=5,i\r\ncf-ray: a356f7883b85c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb3c-8cb7f\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:00 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EPuQVHO175vmnHKPm2jCWAxCJn5bICuEa1oD2sDnghu5nUNRwmWKFSFlJ1po6nHRvloHEiE6aVuxh1gC6nnMEeEkxOIr3u2aCub%2BGJLGvt0ITMlwi7pqOWL5YirxHY9YdqeIUYQ%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1053598\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1053598,"size_decoded":1054406,"mime_type":"image/png","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-10-15T04:37:27.151429Z","times_seen":19113866,"resource_available":true,"data":null}},"time_used":471,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":360,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:08.120Z","timestamp":1788461708120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bansuridabeli.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 116621\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-15T04:30:23.586772Z","times_seen":316910,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":51,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:08.121Z","timestamp":1788461708121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bansuridabeli.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 116621\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-15T04:30:23.586772Z","times_seen":316910,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":48,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/sprite.svg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:08.134Z","timestamp":1788461708134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/sprite.svg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: same-origin\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cuPHHcQimezr7ICN1Oe9KJ7RQOA1YGAetKaAtijKmrHJRNNoeZlj50hBo7vl01Vk1%2BoZWCCdLQLXLvl5vZwg11tlfXOF9FJA60CB4qJKm4KWZhoEGV0S%2F7ALZ6zITySSHYwHvdg%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:08 GMT\r\ncontent-type: image/svg+xml\r\npriority: u=4,i=?0\r\ncf-ray: a356f78bdc27c272-OSL\r\ncf-cache-status: MISS\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\netag: W/\"68dacb45-1534\"\r\nexpires: Fri, 03 Sep 2027 18:55:08 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:09 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5428,"size_decoded":2572,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0f2ea8d5af3fb1f05c1bd870688be875","sha1":"09f8d1ff0f8ae27d4fce0c4f14996a792490fa00","sha256":"954137bedfd90c638212e4b3bdb79d2632dd9550eb0972792d3ea55b02cdecd1","sha512":"035a2e6869469ae151dede3465e12b17a4015ae7e3e07b62f9b3e048e52822280752d3ce6dfa19d4c3e513d8294c716c675d63039048ecf4b228d77c686d5596","ssdeep":"96:t1jV+emragL2g6FcqcAzobC0n68WvI27xYyZz4:XjFMzy5cqcAd0UvpT4","tlshash":"7eb17438e2e9a63d594fc3af2b244028958dd1beb0844154ae2d4ef437271e5e6cf6c6","first_seen":"2026-09-03T18:56:05.990641Z","last_seen":"2026-09-03T18:56:05.990641Z","times_seen":1,"resource_available":false,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/css/normalize.css","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.727Z","timestamp":1788461707727,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /css/normalize.css HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/css/style.css\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2X1m%2FWWCZwGDXdZH9A55WR3EeNf9aCkqcZKUAOnTD1gLtjTtlx2yjW%2B9Qei0Ya13Pm4vNDoi%2BgHLzSmwpFoTUh0lOwDx5yO6byd87%2B6rNcZMBs1UlMSjEhZBEp9NDP2ekOMyiSc%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a356f7894bbdc272-OSL\r\ncf-cache-status: MISS\r\ncache-control: max-age=31536000\r\ncontent-encoding: br\r\netag: W/\"68d18f31-17fa\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 22 Sep 2025 18:02:25 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6138,"size_decoded":2372,"mime_type":"text/css","magic":"ASCII text","md5":"112272e51c80ffe5bd01becd2ce7d656","sha1":"7ffde343bdf10add1f052f3c4308a15180eb4404","sha256":"580818700724d42d7fcc4979b0197971fca1c6d2e0286769237a0ac897df5512","sha512":"a070c473c5de7788625ba0b10fbaa36e723e074eef0dd5fb8443d3be7f694993b56dc46a1e9f268fda72afef11542d869ad11f236062f4a7bd02cb346acfb3a6","ssdeep":"96:FIrs38+a1Dy8lDOhEg3p27oS5tdnCC5wBGeJxmnJnWHO11:FL38UEg527ogCdBRKRWHK","tlshash":"c1c141a117206f2282a60d38776f978a73040127867c3cddb4a262e9cf45b5dd769bce","first_seen":"2023-04-06T20:07:21Z","last_seen":"2026-10-15T05:09:30.474178Z","times_seen":5653,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/cheeseball.jpeg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.566Z","timestamp":1788461707566,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/cheeseball.jpeg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7884b91c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb35-691f5\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:08:53 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eN0gn2BN3yH0rrLmxSrVR9c7dXuhcJxG9cosDUkt9V58JxwxVQxTq4VU69yDvYD%2Bu3ctHb23M%2Bc9OU5oEbdQpXIu0Gyx0E0dLV2t4wv3s4ADgGEWf3gnSPZ5WdBfqy%2BBeavf%2B6k%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 430581\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":430581,"size_decoded":431395,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [\n- TIFF image data, big-endian, direntries=3, orientation=upper-right], progressive, precision 8, 1200x1600, components 3","md5":"08888edc98a85a9b629d7069cddb7b4f","sha1":"d4861946903356d8ca2f8497afd998b8f6fd0f6c","sha256":"d53f963d045f5d191d57f428b4d66d428b013dc083e79ee06678114a241b33ac","sha512":"11695bf216a25c515906b7e6ae47184ab1fbe933df21d5438b350d62a2fa8268361676fd8d6e1f22a946db94a2a9473fa3edc34bc45eda219f1410d3a46f0227","ssdeep":"12288:w9BQfz5LgR83ImambDBmmCU2sR2pgXhUoT9jU:uUtcR8jBwU2sRjvg","tlshash":"149423079e9d39e0f96b63b141a4dac575120ed3ef2934497ccc91c8ab7e8f235c1a98","first_seen":"2026-09-03T18:56:05.992752Z","last_seen":"2026-09-03T18:56:05.992752Z","times_seen":1,"resource_available":false,"data":null}},"time_used":363,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":184,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/spring-roll-one.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.570Z","timestamp":1788461707570,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/spring-roll-one.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7884b95c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb45-f726\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:09 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DQEx9grWZ81yvuvKWHKgbxPewmXXBnpXugU%2FDuP43YWqfCNsSPFLUhVuRbzw%2BtUBDDFD%2Bi28jWIVovHI8cMfHjA2wUTiAIzS2M0F3o7tjunPOEVUwesUTxWQEmzznxqaFMQgVys%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63270\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63270,"size_decoded":64080,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 726x546, components 3","md5":"51aa08a4423912602977580f9b61e373","sha1":"8b5fbca08adc1cfe0ad6a5fea6bef88537ce6bd7","sha256":"35b097e4d25d4006535bf1eed3ce5fcdf325401aac4f3ef4ab4354c3aef3f169","sha512":"841a390f7fced54c7feb42e1e9f928e6b5879711203fc9c574fafd205273483c40234ccd01988777ef824c0cb45df8eb4ed194c55682e1ad09fab413286c7c1e","ssdeep":"1536:nCRvcJ2OtZFUt7/i9zQyAmuU/bxG87FIHLaW+omijsynd/TZjw:CRgbF+PvAbbI2W+o/sydLZjw","tlshash":"1853024dd6c16cdbbef264ec44127d1e67d90713c6e2f481358c08a9d7932fb9ae8419","first_seen":"2026-09-03T18:56:05.994391Z","last_seen":"2026-09-03T18:56:05.994391Z","times_seen":1,"resource_available":false,"data":null}},"time_used":256,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":194,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/js/main.js","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.522Z","timestamp":1788461707522,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /js/main.js HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\npriority: u=3,i=?0\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QIa2Mhae26SFq5GkfYbnHOVimyz5im7oqfpeU30OLuQZO2LV4KoOCG%2F9%2BQ8aXjQ8idZUI7S07qtA9cpKvV4%2FtbLE%2FSxbomhgMRkBgGWZTRuDpzGd58cd5zwgLq9QG7kxFnEydgs%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ncf-ray: a356f7880b5ec272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":207,"size_decoded":767,"mime_type":"application/javascript","magic":"ASCII text","md5":"c62580065224f4a844bf0f791ccd4b26","sha1":"c5e72a2d529ffd3036fbaf8ab05b1165ebea9c70","sha256":"a0c1e1d9fc7d4a62afa15a06108a9f182fd5f3e2c7c5c055939ae9016e36f3c7","sha512":"62277c322f356cb6d1e2fb171e122c1e528d7d0a91803eb46a714b46c167cbd8ba7fab77494ed842c9c4ceed30b0ef828c51331e4db9af7bddbe5d5ff4f066d6","ssdeep":"","tlshash":"89d022390479303080f632e1328a1384a44c006fa006883438dbc3c91f248e51ab5cb8","first_seen":"2026-09-03T18:56:05.996765Z","last_seen":"2026-09-03T18:56:05.996765Z","times_seen":1,"resource_available":true,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/fafda-kadhi-sambharo.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.577Z","timestamp":1788461707577,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/fafda-kadhi-sambharo.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7885b9dc272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb39-42cf0\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:08:57 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MgIc7aJGtJaAyFQhiNMoKH1JkRDWv7r9amoZZFR2jl2MLXVDdmldUyRfQi1qIZ%2BxIjp1cHRNdH9LHIpOu6AkPaIHbFIvCC3Ln0AhlON5R1KtjjtbDGU%2BAqSDF5Twi5Lg%2FRFLzTk%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 273648\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":273648,"size_decoded":274460,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1116x836, components 3","md5":"bd9312640a2a95ccdc7cd50b677f65bd","sha1":"49f9c2337ae3f00a6ac13af3d14f46c62886d714","sha256":"aa2ca3f7e6bf4734e1c655404f3404252defb32176a4ccd35dd5e7a7d62237b6","sha512":"c877a8d99bda1f863cadfd3abaf00fc1bfc9eeb63b6cb89b040cf5d44a2d498ab02161d145b10e61de655c57055d808511f53242ca0e186c1b587daf5b19b6cd","ssdeep":"6144:40MEUkR/Pyxy9cuJyAWBHItbvMletOphfFr4ozYlvOZwKE3RO/Gu:HCc/F9cuJY4bvMldDNZwKgRnu","tlshash":"0e4423f8bc5d5ea46c6524a36b942f8f4a7e7b22bfb73012d942cc634bc2169018cd52","first_seen":"2026-09-03T18:56:05.998346Z","last_seen":"2026-09-03T18:56:05.998346Z","times_seen":1,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":149,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Alex+Brush\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.508Z","timestamp":1788461707508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Alex+Brush\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 03 Sep 2026 18:55:07 GMT\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1258,"size_decoded":1129,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"406cf3bbafa2959f7d61f164d07f1065","sha1":"0a48f01118ffa1ecdfcdd75471e1afc4cdaffd3b","sha256":"f3b9b0b010d45565ce05de026777a73b32d66ad1a148c80094b4d4e6f969095a","sha512":"e96bfd4524d674ab7087c6d6595ea34e6a294e894e28a3eac15191c19682ad4a5751b7b219427874a679427364f236d012b6f6d00f13e25b116d305d1e1c91cf","ssdeep":"","tlshash":"0921eac604369600eb4f0cc623ce7d3a9e4f21957454983aaffd1c889c9ec296329b2d","first_seen":"2025-09-22T12:19:36.44617Z","last_seen":"2026-10-03T21:28:21.317518Z","times_seen":609,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":34,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lh3.googleusercontent.com/a-/AOh14GgKQDfdxMBnsY_2OwNnGIPZR03reTTRUowTQ4qIWQ=w90-h90-p-rp-mo-br100","fqdn":"lh3.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.585Z","timestamp":1788461707585,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:08 GMT","end":"Mon, 02 Nov 2026 08:39:07 GMT"},"fingerprint":{"sha1":"9F:DD:3B:1B:A5:44:27:CF:3C:C3:AE:49:14:86:EE:E4:85:06:AD:08","sha256":"37:B7:79:D1:AA:B6:6C:E8:8D:F2:DE:34:87:06:D3:8A:02:42:2F:CB:DF:65:3B:D5:F5:DB:09:26:A2:C9:0E:4A"}}},"request":{"raw":"GET /a-/AOh14GgKQDfdxMBnsY_2OwNnGIPZR03reTTRUowTQ4qIWQ=w90-h90-p-rp-mo-br100 HTTP/1.1\r\nHost: lh3.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v3c00\"\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: private, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\ndate: Thu, 03 Sep 2026 18:55:08 GMT\r\nserver: fife\r\ncontent-length: 1255\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1255,"size_decoded":1720,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit colormap, non-interlaced","md5":"02315313a1d675b2f6241aa0418cf520","sha1":"1796ba154e50f5ec7fdbe5a54f5820a6fd6a8349","sha256":"635f8a3f6c89dfeb127fa4d4ceaa6895b7c13be93f274fccc6813a182af5e57c","sha512":"e4ac2e472f30ba294dbb2176597183fe9ebbf1b87c08252f14af1b69508a87a986c8ea859cc72fa6e34097b56d28847131f64fc19c92a578f6be95c47ef4c07a","ssdeep":"","tlshash":"bb21e7a321e398df469e40b9038468abe940fee9e1f04e4339118a2a30b354d53d0a6f","first_seen":"2026-09-03T18:56:06.002163Z","last_seen":"2026-09-03T18:56:06.002163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":43,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:08.130Z","timestamp":1788461708130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bansuridabeli.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 116621\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-15T04:30:23.586772Z","times_seen":316910,"resource_available":false,"data":null}},"time_used":84,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":36,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/shop-one.jpeg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.533Z","timestamp":1788461707533,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/shop-one.jpeg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7881b66c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb44-43187\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:08 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JVyiAaTjIp8MtMFtCCQu%2B9ua1MABcgsnQCfNvxlfK6cYNvhkBwPlTLIVaPpmaRBKfRJHLOAfthplFO5TiW68Y7KNlWjHiSx%2FiZyaWlppQ3sC6J4AVyXJ%2FGF6ViGHCOk3f6FG%2F18%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 274823\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":274823,"size_decoded":275637,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1200, components 3","md5":"921e0209d3532f4fc6015435ec31dfc5","sha1":"8a7ed8860c95ef2419be7bd7b05f194e72c05e21","sha256":"e116dc02c91f5ab62b93c785435b95880c023d7f2d8fb6c5c014debde12148a6","sha512":"92b2f708b2975bdbf657abad634b214a9d5a295e92f1a9d864075059c08dbbdcb0bca27bafe2443cae32af49a9eedd537ee70cee9dac8e36e45ea318f20423a6","ssdeep":"6144:M9M8pW14gdoqqlIu7m8Vlk4r3r8Q/XkqTCI++eldrP8LaQER0:M9M8g14gdfYIp8TjT/WbBT8LF","tlshash":"2f4423c753c3b21096d18122cee1a2479e728a5951be37b7f5938e2e7895ce810c4f79","first_seen":"2026-09-03T18:56:06.003243Z","last_seen":"2026-09-03T18:56:06.003243Z","times_seen":1,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":177,"receive":150,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/ragda-pattis.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.545Z","timestamp":1788461707545,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/ragda-pattis.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7882b73c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb41-1509e\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:05 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=riG0LYHCB22JGapHoROHM5CsCVsqXo79Rq0kMy6EEZrV%2B0YmoNNsbcsJapH8SI3EywiwMZNl9oP%2FZLoPUNBotuSnElU8eTKsA7U8E%2B5R65u4tLD6vLnJxChLbDkFH2dzS4LaSq4%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 86174\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":86174,"size_decoded":86985,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 500x371, components 3","md5":"cbaf231710b3573d471806d6aff9c26b","sha1":"cd862b7e8a276aa22da292183a7ed7a03c8d9607","sha256":"ce11843db32b6b804105b844514babebc4696d7ea5a1e1e025d5eb7ae2425529","sha512":"db9c95ff2c28ac8599dc257b403d5e4b63141247816819765214959f7cec80b500ce1675ab1f79198bea8d0d9e8277fa84d13525749b202e1341df178475d16a","ssdeep":"1536:Y2/CMAqtWbCX+tksseTVStA24ju9jAFNnE9T7pA1H5PGMytk4TXJU+pKHj0G4ID:4MAqtyCTsXSZQgqsvpA9ZGzruOKDXD","tlshash":"378312345815acc1db58faa5edd0f9d062c3c688bc7ffae891e390a911b0b0fd21419b","first_seen":"2026-09-03T18:56:06.004747Z","last_seen":"2026-09-03T18:56:06.004747Z","times_seen":1,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":66,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:08.124Z","timestamp":1788461708124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/inter/v20/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7W0I5nvwU.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bansuridabeli.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 48532\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 02 Sep 2026 10:31:27 GMT\r\nexpires: Thu, 02 Sep 2027 10:31:27 GMT\r\ncache-control: public, max-age=31536000\r\nage: 116621\r\nlast-modified: Tue, 09 Sep 2025 18:33:50 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":48532,"size_decoded":49345,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48532, version 1.0","md5":"225835e6e0496c54dc2aca9f3d533892","sha1":"942ef5298bbe74bfe44e445def5f2bfc94027fa8","sha256":"acc60d454f46f2ba233c516aa3299aa60e1f49ffd0f06b8392a7c772a5694087","sha512":"ea2ff96ed5ac965c1846b4b33990beab3d4ced66806fa44321f5dd59d9a29a8ae1a67a5816d40165af8a896677b6a24bb74ea6db53cd5e686080165db9fd62c2","ssdeep":"768:b9tYsJ6BxVEpu8sqEkvfXRGEBqH7KxpxA07hQv2bSokjQx2AOWUVOv7UeFHOpIsR:LsEcy7fXRGqqHmr7qv32UC7UetOGLkF","tlshash":"03230178cf9f85b3d33b153afaf4d20562a9067de76c4a803831051a2a55770b89dc0e","first_seen":"2025-05-29T17:27:56.345238Z","last_seen":"2026-10-15T04:30:23.586772Z","times_seen":316910,"resource_available":false,"data":null}},"time_used":95,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":46,"receive":36,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:08.125Z","timestamp":1788461708125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bansuridabeli.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 28 Aug 2026 18:08:07 GMT\r\nexpires: Sat, 28 Aug 2027 18:08:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 521221\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-10-15T04:33:47.898176Z","times_seen":571467,"resource_available":false,"data":null}},"time_used":96,"timings":{"blocked":14,"dns":0,"connect":0,"send":0,"wait":63,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/specialdabeli.jpeg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.543Z","timestamp":1788461707543,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/specialdabeli.jpeg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7882b70c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb44-4739f\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:08 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1ON475iobDtjL6XAUzmubVp46P2gB%2FL1xq4MLxJLikiX466OfNSlhfoeYY2vJq8F2lPH3gMZ7ZpVIXNsjzMK8%2BwMWlFHF0OHnVuQRl%2FhLIB%2BDu0jgVJHMrFuA5LqFdn4izLnFEA%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 291743\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":291743,"size_decoded":292557,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1200, components 3","md5":"fb0a4e6eb741fef6d8ff78f35ba12e0a","sha1":"3ac58b94489d66adbb61cfee27daea266cd9a04a","sha256":"c0414526be4cac804ea9b2341ab9447e3dded68e7d5a356ec83a5374437e8733","sha512":"bb1b82c8428d092d21dc2b8d6b976f8c458e7cf68e291f9d9a6f9b3032bdef6bbe1cedff5ced664318554d55a5cc2da2745d86f19c6fe5c50d00c228df2757b3","ssdeep":"6144:up3yxJoSZkjjT3tkhudPGNMgRyDu8uaMWtO:up2WSZkjjT3TeNNR89Ml","tlshash":"99542351b95532a9bc9a33e80cbe6422382ab79cb47586fc551448831ceff34f786cd2","first_seen":"2026-09-03T18:56:06.005856Z","last_seen":"2026-09-03T18:56:06.005856Z","times_seen":1,"resource_available":false,"data":null}},"time_used":351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":196,"receive":155,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/chilli-paneer-wrap.jpeg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.554Z","timestamp":1788461707554,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/chilli-paneer-wrap.jpeg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7883b82c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb34-4aef4\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:08:52 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qfWbW74zR3iVAQtJvzgzcoj8h1MZICqIKXkv64U0NlzzP1rrvToDICGn1Y9%2B5pNx%2FAMXY3PDjWc%2FbWmNFBIi%2FEDQd6%2Bl%2B9Q0Tpxbzh9qPnXTFp8UszdemA1QV%2BAwNZBqZ2ka5%2B8%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 306932\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":306932,"size_decoded":307754,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1200, components 3","md5":"8cd4e0ac902a1412a54500e6a2a4fe8a","sha1":"2321bf901c499de5fd80aae368c68b2cc08837c9","sha256":"f1aaa94d35e51271183a07b06455a9d908b0f279de03b52f91d28941d9653ba7","sha512":"96dd0c449a7f16f257c6374444fc6574618339aad320fff26cf60e335573d4466c92a37a08a60bfce8cebe198b3d0efd92518de15245535201a91bf6a593b049","ssdeep":"6144:K1a/LRgG7Hiy8eZeSSgmYqLC0Qq8c7oJt67mqxoubn+Yt2fKwkoKGNZ:K1aSG7HiMZeS3xq2qn7oJg7mmzRYWGn","tlshash":"7364237a7d7312cafdf2761992180b2119ca1b8e307329ae3d5f1d26f097bde029549c","first_seen":"2026-09-03T18:56:06.007305Z","last_seen":"2026-09-03T18:56:06.007305Z","times_seen":1,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":198,"receive":159,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"code.jquery.com/jquery-1.11.1.min.js","fqdn":"code.jquery.com","domain":"jquery.com","tld":"com"},"ip":{"addr":"151.101.1.155","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.512Z","timestamp":1788461707512,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jquery.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV E36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 20 May 2026 00:00:00 GMT","end":"Fri, 04 Dec 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DE:F8:0F:C4:8F:BC:F5:01:B1:66:91:CC:15:DC:D8:6E:5D:2F:45:4E","sha256":"05:8E:2E:14:85:E2:41:28:F5:18:A4:37:49:31:2B:0E:24:53:64:3F:02:15:BE:63:EF:F4:B8:53:5A:8B:6D:29"}}},"request":{"raw":"GET /jquery-1.11.1.min.js HTTP/1.1\r\nHost: code.jquery.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ncontent-type: application/javascript; charset=utf-8\r\nlast-modified: Fri, 18 Oct 1991 12:00:00 GMT\r\netag: W/\"28feccc0-1762a\"\r\ncache-control: public, max-age=31536000, stale-while-revalidate=604800\r\naccess-control-allow-origin: *\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\nage: 2633253\r\nx-served-by: cache-lga21922-LGA, cache-bma-essb1270071-BMA\r\nx-cache: HIT, HIT\r\nx-cache-hits: 25682, 20633\r\nx-timer: S1788461708.550546,VS0,VE0\r\nvary: Accept-Encoding\r\ncontent-length: 33202\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":95786,"size_decoded":33843,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32086)","md5":"8101d596b2b8fa35fe3a634ea342d7c3","sha1":"d6c1f41972de07b09bfa63d2e50f9ab41ec372bd","sha256":"540bc6dec1dd4b92ea4d3fb903f69eabf6d919afd48f4e312b163c28cff0f441","sha512":"9e1634eb02ab6acdfd95bf6544eefa278dfdec21f55e94522df2c949fb537a8dfeab6bcfecf69e6c82c7f53a87f864699ce85f0068ee60c56655339927eebcdb","ssdeep":"1536:/PEkjP+iADIOr/NEe876nmBu3HvF38sEeLHFoqqhJ7SerN5wVI+xcBmPv7E+nzm6:ENMyqhJvN32cBC7M6Whca98HrB","tlshash":"b293c8d9b6d27162977730b850bf510bb13a98eab80c4c60f1a4d8e47d78e89507bf2d","first_seen":"2023-03-07T01:02:02Z","last_seen":"2026-10-15T04:29:08.924365Z","times_seen":61105,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":4,"connect":9,"send":0,"wait":9,"receive":4,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lh3.googleusercontent.com/a/AATXAJzKrrI3MnLikfddktHlGSJ1kdYZW4HfNL-bcOJR=w90-h90-p-rp-mo-br100","fqdn":"lh3.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.583Z","timestamp":1788461707583,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:08 GMT","end":"Mon, 02 Nov 2026 08:39:07 GMT"},"fingerprint":{"sha1":"9F:DD:3B:1B:A5:44:27:CF:3C:C3:AE:49:14:86:EE:E4:85:06:AD:08","sha256":"37:B7:79:D1:AA:B6:6C:E8:8D:F2:DE:34:87:06:D3:8A:02:42:2F:CB:DF:65:3B:D5:F5:DB:09:26:A2:C9:0E:4A"}}},"request":{"raw":"GET /a/AATXAJzKrrI3MnLikfddktHlGSJ1kdYZW4HfNL-bcOJR=w90-h90-p-rp-mo-br100 HTTP/1.1\r\nHost: lh3.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v0\"\r\nexpires: Fri, 04 Sep 2026 18:55:08 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\ndate: Thu, 03 Sep 2026 18:55:08 GMT\r\nserver: fife\r\ncontent-length: 2644\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2644,"size_decoded":3141,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced","md5":"ff57b1e8cac241d620df910a3dfe7fca","sha1":"70e86e7dc3a2e16f2aa21656e297c99a98032023","sha256":"4fc10775f0fc78a38754e25e8e9d7d921942993e612098a20f39ff15a162fc5e","sha512":"53151f8912b313aa5c76bebcf2f99d6927742281f8a166979a5633f912cd897de978247b60e1a956a2aa8b98be30105f2744a12fa55b641019dafc3879eb66e6","ssdeep":"","tlshash":"3a516a5a3f6aeb4ae1111130c7322682caed75b9c49e4734282cd60c97b9d8f6201f8f","first_seen":"2026-09-03T18:56:06.008966Z","last_seen":"2026-09-03T18:56:06.008966Z","times_seen":1,"resource_available":false,"data":null}},"time_used":404,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":118,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/samosa.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.567Z","timestamp":1788461707567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/samosa.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7884b92c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb43-b62a\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:07 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kvyB1VZ0l1kYJvCfy32uMc1nyZZyuBEviX%2FGOQTNEGRd8FJ3CXHCvhR0ukfLVKKdrogF4%2FzcTe20y1Yay87MvUO3kvk8gurK1GSjgFSfJUH%2Fwea52GA5t3L7agLmBy46HST%2BBLY%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 46634\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46634,"size_decoded":47446,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 512x384, components 3","md5":"b097771e32e055a7fd11dd5437c8f988","sha1":"e34bc862990e6d06611cc7e6dbd44dd3010909e1","sha256":"9e13d0f1f7c76327f903d1eb74cad6768fcf837dd1e31f874d2d81b3123875c9","sha512":"4bb7c37218fe307e177db987a1ebc7290b6b9317981505f9bf3959fc9e66bc6f2c6cbb28abe4537b099a3ba5eca1691cc2df7de70ec35137064d880f906cd2c3","ssdeep":"768:p9qr66MCL6a8CE95UMH5ja4CcbHBfczGjSN8iPfBuyLTZmd34djKH0WIOYM8vLo5:fqdMCV8Lfj5jaaezK88iPptvcfH0WIRg","tlshash":"6823023778cd1922f3906271efc8e184025553fd6bbc0ab54aa63993a60da73ad4fe50","first_seen":"2026-09-03T18:56:06.010098Z","last_seen":"2026-09-03T18:56:06.010098Z","times_seen":1,"resource_available":false,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":63,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/fafda.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.576Z","timestamp":1788461707576,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/fafda.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7885b9cc272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb3a-baff\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:08:58 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aHN9Q5DVF36gzD18%2BXbk5Wz9enTueQo%2BPRi6FkoafMcvE%2BSUhZQmv1Ny1LlIHyZ3BRXvpB%2F7yMYVgL4cf9TvaPSufmniVCUvqBiynyksZpCrxuQVX%2FH%2FD9G0EEotl89rgxnixNY%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 47871\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":47871,"size_decoded":48687,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 497x370, components 3","md5":"731ff3ed2d3b17ad8914a74a9c9db11e","sha1":"c6ef7d2bd391ff8939e6e5807043ebbcb596d0a0","sha256":"fe994a1828300c1943741761eff9a5ea1f9d5f1af5db4cb1cee9255080ce6629","sha512":"3cacceb3be091e1ad52819d11accfbf5db001a71e0b6fe9a98c7380b3be90e28e3e5503b97627f62bc8419e0aa9032b3d0e437c16c9ad68d9719da3166336340","ssdeep":"768:gA9qxrGoo8BLGRR1XL2ptrF7VEbyc/fmToZbhvXiPC9A5EzRD/zM9dyN:gAYxRo8tAR172pX77ajiPCrRzzMdyN","tlshash":"c0230255869322c8ffb456fcadb51cb0a0de4dd159bd264e16e4008c2ee3eea0c0677b","first_seen":"2026-09-03T18:56:06.01108Z","last_seen":"2026-09-03T18:56:06.01108Z","times_seen":1,"resource_available":false,"data":null}},"time_used":217,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/dabeli-one.jpeg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.538Z","timestamp":1788461707538,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/dabeli-one.jpeg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7881b6bc272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb36-70d1e\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:08:54 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qvyxvsPH1VOI5AFTMAuJKHVnx5EOvzDgxUUCWKA48R%2FXC8PVgJ12dpYgm%2F2fDs%2FW5LgJI7UQxhuSMYLYYWyhL8N8GUmJPbbr2x%2B1cnA6mZGoMYXCI7QcaXPJ%2BzvIraG2XrZUJJU%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 462110\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":462110,"size_decoded":462926,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1200, components 3","md5":"717c56b7ada5ddaef9fd6a1d8842a301","sha1":"261473c050ccaeffadcaf09af086c57a5538fa1d","sha256":"b61e98f05c08b449303927d445aade2f3884204be3702b50238b29d0ed370c48","sha512":"842543c94778947180c3b87bc1f7a8a7a96455f51bef72fac0510995ef6bf6d9b01e87926c2ab2d4a4dba3d665a609fa4fdfe2036905b8aa04a6328e0042ecb5","ssdeep":"12288:Bk2yfrB1L2Q2l2MbTyj2ibNWkCJVxFmkb1OIRnk6+3Q2NK:BkTzLnz2qWkcSkROIRnk6+g/","tlshash":"3ba42362312dd77d3633b1e4f3c486cc1e79a9a42355cf8aab2b250d0e0b797786a705","first_seen":"2026-09-03T18:56:06.012473Z","last_seen":"2026-09-03T18:56:06.012473Z","times_seen":1,"resource_available":false,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":173,"receive":211,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/vada-pav.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.542Z","timestamp":1788461707542,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/vada-pav.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7882b6ec272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb46-4c6aa\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:10 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ONiGx%2FmZ2rCf16C1N3c3evXGWZOqodfKMZmJBCEiKr42eus%2FmCqc6c1MDTg2KmLQuhlzd1MgkgOpDrcwNMOuXBC4rEMqk2mrMhhv0sDwLQMhN2Zch5VToa9jxWe4rRtzNMDudow%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 313002\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":313002,"size_decoded":313812,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1200, components 3","md5":"7cb14a316e5d575c2086d5d23fd9dfba","sha1":"ac8c3966e11ddbc2765b24bb6937fd3737227d5c","sha256":"4ba60eaf5447c61a30d8930c861dcf7a1a76aa95324baf2884b28d8938114d3c","sha512":"63363b33df368420a5864c4d976bc041404002cf574a35ba2dbac2fdf5225e0d4aad8042e2b658a7d1b198edae11e8affd72a6bc220729e9750acd188775588a","ssdeep":"6144:JgBM48hPZ+/Z9z9TU0GYLb4McAvxqXdK7xvcE0BdLRMk1ej:eBL8hPm54YLcMLxPxUVbRMk1ej","tlshash":"3964237c11457b4e7367a7638de0a52ae52e25c1a3b70aed58112adb39710b0c33ee87","first_seen":"2026-09-03T18:56:06.01365Z","last_seen":"2026-09-03T18:56:06.01365Z","times_seen":1,"resource_available":false,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":120,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/samosa-bhel.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.546Z","timestamp":1788461707546,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/samosa-bhel.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7882b74c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb41-8e3e\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:05 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J%2FdNHU2Fy15vljNmSMf9%2Boy5gRkkMs%2BIA3xaJnOgj8e2byNu3OZNP5LwhJNvqbrGsn%2FZzVMLibvThvWMgkplxg7XtrfuHA7fIucPfrWWBeHxXGwendMEh1%2Brd%2BNO06Qi9Zy3tI0%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36414\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36414,"size_decoded":37230,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 342x252, components 3","md5":"a760314bf2043c7aa0349576b9028c76","sha1":"09d5303811938be86e8f654f27039e00de04f74f","sha256":"35f3990d4c245c41994cac6f90567bffb94d686076e2ef11cfae7d5ace83e25c","sha512":"457e96f3b4078ffee870c32434d409649131320e9c1a5f5a05833cb7398ec80c1d4cfd91a8422c5ae958108ac5e4f3e9ca3d375aee06d4380923ef30a73cfc66","ssdeep":"768:CDeeiWnxjrFObkFKeO1jbAMKMvi2pN2a2Ch3xNLJFMo3:CqejNZZcj6Mvi2e9C3Ndn3","tlshash":"32f2f10befef51c03b5881c66e3b067c9e1960b63646b05393f23b42bd50ae3591b706","first_seen":"2026-09-03T18:56:06.015024Z","last_seen":"2026-09-03T18:56:06.015024Z","times_seen":1,"resource_available":false,"data":null}},"time_used":248,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":214,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/bhajia_pav.jpeg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.541Z","timestamp":1788461707541,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/bhajia_pav.jpeg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7882b6dc272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb31-3b87c\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:08:49 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hm%2FDeuzVJq%2B5SPwo6aaOuHjTFKKuIl9jHEZ8LionMKQmBYDYofvilF6zCVdZxPiVyTeDMMG35nhetaeJ7%2BoXCZBDQDwcOCKsFnDB4yul0dN7JMulLiwI5Uao0Ny2ZR6RPKqe%2FCE%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 243836\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":243836,"size_decoded":244650,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1200, components 3","md5":"d5b84fc804c63f850c95983dfb73b700","sha1":"eba8c370eb3df28d28c221ffbc0772b4b7b3f34b","sha256":"fd6294a70792c685c1d80c73217b4a4c33ffe99457fd866f124c3fc5221d2d22","sha512":"cd9f1045783e223cd38297889eb8fadc71ad28ebc917d26f1a3f55de3463438ba6177c8483ab2132163b4b7735cd6611c425dd33e6881edbf2442cf70eb7ae0a","ssdeep":"6144:CPHUIpYebyYCS9H3j7YgVL+sdJ0A53hT2Tz:C/U2XT9Xj7lV10A53kTz","tlshash":"3234230ce1dc5aa1c99881af5f6e67c90fd1193abb113f089723aad1d075deb9470f81","first_seen":"2026-09-03T18:56:06.021395Z","last_seen":"2026-09-03T18:56:06.021395Z","times_seen":1,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":130,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/bhel.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.544Z","timestamp":1788461707544,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/bhel.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7882b72c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb34-9ccfe\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:08:52 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=j7cEf4NYrBr0Zj%2FpG6wctbkT3z5FCT94qQ0BvxMUx%2FOQX1XK4P1YaNlW8fSCxOrf5SNoIasSUjw65koYDZHQb5nQJWhmFNydGHRKfnZKdtjoJCGUNUwGw%2Fr2z0vmSp3b1z92dxE%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 642302\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":642302,"size_decoded":643114,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 2000x1500, components 3","md5":"195258b3d5888850b5c278f49f09f5f2","sha1":"3a2517dfe2d4cedbdfc8463960ee38d85ede00b8","sha256":"85f86813e35a5afdbb28ab2e0d262aef40e00dc914d1b09f8c5295846b355375","sha512":"34edcb3e3b50133e8142fafe207473b6de8dfd83cfd69541945a700dd853fcc644b5a446a4b5207f715e7660539c24e1523678cb3cd712b2af872e04365ab386","ssdeep":"12288:FfDJrRNNc1GwU3Zpn9G3ZQzWnk311dhYyc1t1a3ZU7Sj:F1rziUpQZ0vNh/c/IJCSj","tlshash":"47d42305e8b790f694d156274234aec46b016889fe6fdefc9cf5350e0aefcaa472a540","first_seen":"2026-09-03T18:56:06.022766Z","last_seen":"2026-09-03T18:56:06.022766Z","times_seen":1,"resource_available":false,"data":null}},"time_used":399,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":217,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/samosa-one.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.568Z","timestamp":1788461707568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/samosa-one.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7884b93c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb42-16298\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:06 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7KBao51YaCrT5fDav99MDpIZaw%2B5RhvZrSC2xazWEo38ejKFVLoWMTEPqOA9znPDWUCcz5e6iN0ZLYEEidTfH%2BSjy%2BFk7XXBI2FTwuAhXVsyVall2rrZwayVmEux2qbJ5Ctk6sA%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 90776\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":90776,"size_decoded":91587,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 727x546, components 3","md5":"b317af60cffc799b4ddcdaa12c0dfb61","sha1":"8ee34fe85bf8592b5182b98c3abc6ecd6948d1f9","sha256":"ba9592df8c23ca5cdbf669e57931e4934d42ae77a51ea0a8a157cd196eb37957","sha512":"2749d54b9c28e54bbcb989e625b1f4ef38bba352a7343b0fcc40e92d4a78801129f0bedf5f47ca40595b348ed93f3d7270b3598d5c43496fdae5ff6760bc8cea","ssdeep":"1536:irULy3j6R0VbmfNiyjTGJ49BqulVVX86KP7aijVdKzNIJ/SQT1CcKoA4SZwokNXm:zyT/Bm0yHlBqurVX8f7hxdKsSQZQp4ST","tlshash":"da93025b9c123e4f704a5a8b2b53b9329ed90753836b197968bc0fd14f1ed00a6dc6ac","first_seen":"2026-09-03T18:56:06.024448Z","last_seen":"2026-09-03T18:56:06.024448Z","times_seen":1,"resource_available":false,"data":null}},"time_used":207,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":61,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lh3.googleusercontent.com/a-/AOh14Gg2A3RReEkREPdpWCS7untHTGyve--OY5CUklVoNnw=w90-h90-p-rp-mo-br100","fqdn":"lh3.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.584Z","timestamp":1788461707584,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:08 GMT","end":"Mon, 02 Nov 2026 08:39:07 GMT"},"fingerprint":{"sha1":"9F:DD:3B:1B:A5:44:27:CF:3C:C3:AE:49:14:86:EE:E4:85:06:AD:08","sha256":"37:B7:79:D1:AA:B6:6C:E8:8D:F2:DE:34:87:06:D3:8A:02:42:2F:CB:DF:65:3B:D5:F5:DB:09:26:A2:C9:0E:4A"}}},"request":{"raw":"GET /a-/AOh14Gg2A3RReEkREPdpWCS7untHTGyve--OY5CUklVoNnw=w90-h90-p-rp-mo-br100 HTTP/1.1\r\nHost: lh3.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-expose-headers: Content-Length\r\netag: \"v344e7\"\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ncache-control: private, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\ndate: Thu, 03 Sep 2026 18:55:08 GMT\r\nserver: fife\r\ncontent-length: 1255\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1255,"size_decoded":1701,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit colormap, non-interlaced","md5":"02315313a1d675b2f6241aa0418cf520","sha1":"1796ba154e50f5ec7fdbe5a54f5820a6fd6a8349","sha256":"635f8a3f6c89dfeb127fa4d4ceaa6895b7c13be93f274fccc6813a182af5e57c","sha512":"e4ac2e472f30ba294dbb2176597183fe9ebbf1b87c08252f14af1b69508a87a986c8ea859cc72fa6e34097b56d28847131f64fc19c92a578f6be95c47ef4c07a","ssdeep":"","tlshash":"bb21e7a321e398df469e40b9038468abe940fee9e1f04e4339118a2a30b354d53d0a6f","first_seen":"2026-09-03T18:56:06.002163Z","last_seen":"2026-09-03T18:56:06.002163Z","times_seen":1,"resource_available":false,"data":null}},"time_used":396,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":110,"receive":0,"ssl":266},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/aos@3.0.0-beta.6/dist/aos.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.0.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.641Z","timestamp":1788461707641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 14 Aug 2026 09:33:07 GMT","end":"Thu, 12 Nov 2026 10:33:05 GMT"},"fingerprint":{"sha1":"1C:D8:D0:A4:67:8F:85:71:E9:2B:BC:15:AB:AD:45:77:F4:1F:F0:B9","sha256":"6A:22:2D:57:8C:D0:4A:46:32:29:82:15:1C:6E:A0:55:CF:C4:1E:22:41:20:A7:3F:BA:36:66:EF:51:08:77:47"}}},"request":{"raw":"GET /aos@3.0.0-beta.6/dist/aos.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a356f788cb285697-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 660174\r\ncache-control: public, max-age=31536000\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Fri, 07 Aug 2026 06:30:59 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:3R+azxOxLxidpHXg8jx8UFdnhZq2IKrGNpZJdAk8KB0=:\r\nfly-request-id: 01KX2G6W7A82XZ2DVCD7254ZC8-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13800,"size_decoded":5747,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (13799)","md5":"aa20b6e0418d20fb86b071e670b2b207","sha1":"e38950c1bce65e9f048e305b3567ff90a0c923e3","sha256":"dd1f9acf13b12f189da475e0f23c7c505767859ab620aac636964974093c281d","sha512":"b6734ce8f3cd3957d9e6c18fc3a853842adc5017aab76995124dc4023f2d0adb8c1ea6ee566e7f1ec65a82bafc5b669a144fbaaca201c86c106c49e6a1dad856","ssdeep":"192:mOaHX24ysbeCVXVyILkYmTpOIytlomlBpOIVtlomlrjm5bovo5FglaZW0fNacZgu:mVpyRSVLL28HVjkFglMfNaEg+l","tlshash":"91520adc7286f166475394bb417f610bf2f154a4684d8040e239c5e73eb989aca33eae","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-10-15T05:10:48.817048Z","times_seen":11491,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Inter:wght@200;300;400;500;600;700;800;900\u0026family=Montserrat:wght@200;300;400;500;600;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.505Z","timestamp":1788461707505,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css2?family=Inter:wght@200;300;400;500;600;700;800;900\u0026family=Montserrat:wght@200;300;400;500;600;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Thu, 03 Sep 2026 18:55:07 GMT\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":31778,"size_decoded":1852,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"cc2639e222210e17265f8564745daa63","sha1":"b3ef497add049741458aba06dd2eee42d3efaed1","sha256":"966f7c5cddd1319128a0c239c0caa02e5ee993669b41bbe94b9b94261d3c38fa","sha512":"c781603cdeb7212b7ac8c7f4998d83ea3e145f3bbf79ce235a93d3ee735b2fadad06af4caafbeddba2e05f16e3b002ad47ead98fd7eb9b78b01f439a0818051f","ssdeep":"192:XNnWjO3GAxRKNA1cO3lnxirNNIxO34OxDENOPCO3/Nx8NNryfO3iExlONEhYO3Rs:d1OKYXuM0p2+g7GQlOrRPQPTzajde","tlshash":"c6e2cd91002be500ab871cc623cf7f3aae8e20957495c5796ffd1cd8acead26436476d","first_seen":"2026-09-03T18:56:06.026458Z","last_seen":"2026-09-03T18:56:06.026458Z","times_seen":1,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":-1,"dns":3,"connect":15,"send":0,"wait":36,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/dabeli-main.jpeg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.536Z","timestamp":1788461707536,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/dabeli-main.jpeg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7881b69c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb36-3ee7b\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:08:54 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=l2FF6eYLnx%2BOY0B1dUv0lD2IuD25vYJox5fE2vKnDjTRNVKpnijl%2BgSzzekE3E9SxFvb%2BBv9%2F%2FZlheywIR0QwWMDDw%2F4b0H1fLRXsc6L8bqXDyY9i38LuY1QD1pafeDmqfi9Bug%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 257659\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":257659,"size_decoded":258477,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1200, components 3","md5":"a3168721cd88eb1b53adc0ed77ef4c05","sha1":"6cf15e867f1e15a3b63d2b742861132b9a76bd56","sha256":"de450d0c8606beca06386d06fbc160b87ea358133de23e44cb9f9fe7d4b49665","sha512":"37e766156e35b41e7d050faf9710189bf0f76a87603ed0194fb5b2a9da256fcd9adf3936e1118f04793af6a043390b6fc0c039a1c053836b32214330644c6e4b","ssdeep":"6144:rvoJ4QuUFGOP5/cY912fB+I7FmLEuP/xh7wCH/92GdXljtrZbL:bzAGOp2fB+I0LEEZpwKF2wljtrZ3","tlshash":"f14423c76868509cbc2d1fa2240d0c4491909d9bb9380eedfca59f7c4ab90d9de52fe7","first_seen":"2026-09-03T18:56:06.027731Z","last_seen":"2026-09-03T18:56:06.027731Z","times_seen":1,"resource_available":false,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":143,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/spring-roll.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.569Z","timestamp":1788461707569,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/spring-roll.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7884b94c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb45-2d84c\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:09 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ki%2BXVykdrNKmkWmjOTQjPoicgLUFn41kjVcWkWNLGB%2FDZcvBjk5nJ9UzJaJSuHMBVAdEdGxldSqAezzgfaVipXh66qfVux3V5dx0lHTrH9bTElPXx0uRd8XwsseeHnUWNckEZIM%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 186444\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":186444,"size_decoded":187254,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1200x899, components 3","md5":"4292786cd1f650a528819594cc530081","sha1":"80d26cb4cb394543b18e58ba8b966be229c473d9","sha256":"257a6dbb33d771f4c734271c20afb69c8556f06419f2d5a56886eec93f8e6be9","sha512":"d6d12c1b46b0f85ddfbc179bfc838c0bfa14bad39bb5b7b38e3910c35a7d0756cb4a662b0920894a5b49f6e2c8f5d019b81a7944fd93650ea0db8758c8058571","ssdeep":"3072:Zo1a76DINdAmitMzCL/G1V+zbOGIty/oAxtQUd0pnUVKBtvGc4H7AFYWbvokI9mJ:ZR76D2CPn+ab5IV2kUVKXGcGAu+vGmT1","tlshash":"2104232a54b9fe500b0a217de54d0c8fd99f156b6930356813b35016b13f63ced87f6a","first_seen":"2026-09-03T18:56:06.030213Z","last_seen":"2026-09-03T18:56:06.030213Z","times_seen":1,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lh3.googleusercontent.com/a/AATXAJwxNSH7rwZMaCH_m4Ti0s0b-ufSThgtzBpBi2fF=w90-h90-p-rp-mo-br100","fqdn":"lh3.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.33","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.586Z","timestamp":1788461707586,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:08 GMT","end":"Mon, 02 Nov 2026 08:39:07 GMT"},"fingerprint":{"sha1":"9F:DD:3B:1B:A5:44:27:CF:3C:C3:AE:49:14:86:EE:E4:85:06:AD:08","sha256":"37:B7:79:D1:AA:B6:6C:E8:8D:F2:DE:34:87:06:D3:8A:02:42:2F:CB:DF:65:3B:D5:F5:DB:09:26:A2:C9:0E:4A"}}},"request":{"raw":"GET /a/AATXAJwxNSH7rwZMaCH_m4Ti0s0b-ufSThgtzBpBi2fF=w90-h90-p-rp-mo-br100 HTTP/1.1\r\nHost: lh3.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v0\"\r\nexpires: Fri, 04 Sep 2026 18:55:08 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\ndate: Thu, 03 Sep 2026 18:55:08 GMT\r\nserver: fife\r\ncontent-length: 3367\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3367,"size_decoded":3864,"mime_type":"image/png","magic":"PNG image data, 90 x 90, 8-bit/color RGBA, non-interlaced","md5":"586323c0802db08ea9e9e644689c6e60","sha1":"6b76beb13827eb07c5f6027115f48654846a42fb","sha256":"3e9cc77c8a6e9f4a313e1d2bd989c0953420afdc6babc242156a146c2497b88a","sha512":"1bb16464536f063877a70d8132fac4d12025c0ec458e4fb6aa1b34629aca3e15319fb69fbead901c638d4311c42c5600232628fda50e05e78a232e0f4fd1f662","ssdeep":"","tlshash":"2d616ed5833a1bf68377eb1360ef546190b94eb32075846c78af792425d706de009a8d","first_seen":"2026-04-08T02:04:30.570684Z","last_seen":"2026-09-03T18:56:06.03146Z","times_seen":2,"resource_available":false,"data":null}},"time_used":330,"timings":{"blocked":-1,"dns":3,"connect":19,"send":0,"wait":44,"receive":0,"ssl":263},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:08.128Z","timestamp":1788461708128,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:10 GMT","end":"Mon, 02 Nov 2026 08:39:09 GMT"},"fingerprint":{"sha1":"AB:CB:A4:4C:A5:65:CD:AE:7D:49:56:A1:8A:F1:7C:FB:63:84:AE:13","sha256":"61:13:42:1F:BA:E8:AE:1B:A2:FC:89:02:B5:BE:EF:3C:35:FC:AE:06:22:3C:B0:DF:74:48:AD:42:E0:4A:30:A5"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://bansuridabeli.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 28 Aug 2026 18:08:07 GMT\r\nexpires: Sat, 28 Aug 2027 18:08:07 GMT\r\ncache-control: public, max-age=31536000\r\nage: 521221\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":38569,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-10-15T04:33:47.898176Z","times_seen":571467,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":58,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/veg-manchurian.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.549Z","timestamp":1788461707549,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/veg-manchurian.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7883b79c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb46-40f28\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:10 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=96T2STAV0otrVKNLdf4asIZbPrq4WuVvdnBlHqFHzBshvbKqSHokjeCKa1%2FlVDxIKqPIzRwYjg%2BGCZcUgROgHS5Fd5qldVCUm4%2BgCK6b5z3Rw58%2FR50d6kgf0Htu0AEXuRRQlj4%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 266024\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":266024,"size_decoded":266838,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1200, components 3","md5":"dad320f783257b765b238ca71c0d9932","sha1":"7426b133102ad7d69ef1301b733725a23288601a","sha256":"cfdd7290c8335c94895e772d446a8213b64b3dc8c3e50a862ac0f1619e8d004a","sha512":"9b7742d1accff3039be0d36676adfbf6ef73212a4fdaf835e3182e83c2398502b75eff64fbb27234c0034569385083e7b061555718b47a071eab9593cc02dc9e","ssdeep":"6144:kF6WNxf0089m/rWMWpYnYxO/yStPediGh80:46m/nWpCp/ywjL0","tlshash":"404423219250a50137294489ce498fc11be37ccd97afe6dfb942de6cb9431f92b188de","first_seen":"2026-09-03T18:56:06.032908Z","last_seen":"2026-09-03T18:56:06.032908Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/dabelimasala.jpeg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.539Z","timestamp":1788461707539,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/dabelimasala.jpeg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7881b6cc272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb37-73a1c\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:08:55 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PeVA%2FTGwiImYdKyaAK5DElBEPfRR0QlXcAqPnM1TYGmR%2Fjfrx%2BvfdX5aSVDoB6aJ0ZWkPr7k17On4Y7oGfnO58StD8zTIhZV0VGi%2FrClDcmCh2%2BfLcCZdbgjt4v0Rk8OvgcMpu0%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 473628\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":473628,"size_decoded":474444,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1600x1200, components 3","md5":"9655ae8635d455a3e7785dca3be96fe1","sha1":"6834a6e9cc598322f7d97349fc4a7ba1fd7ecc68","sha256":"1307da1294c8c0efd7c1140d118bac51834317425938ffd4d54f8208a4b91137","sha512":"c50891c94cba76fda4067fc6f05cf7099908cd52a20625eba5a1892e9854dfe5238a3d26bb1e61d4d10f1691a6620f58e4d4878118e7930551210e1e074f92dd","ssdeep":"12288:i4hxLq5UkG1uiinsYtvmFBbN9TSbJjkoq8YXAa9ogyK:33Lq/G1UnXvKBvTINk9fAcyK","tlshash":"56a4237303bf0a9f3ba899f10454567efe639364368b6206d60345a9ef0f166c2fd981","first_seen":"2026-09-03T18:56:06.035921Z","last_seen":"2026-09-03T18:56:06.035921Z","times_seen":1,"resource_available":false,"data":null}},"time_used":359,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":198,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bansuridabeli.live/images/samosa-chaat.jpg","fqdn":"bansuridabeli.live","domain":"bansuridabeli.live","tld":"live"},"ip":{"addr":"172.67.144.247","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bansuridabeli.live/","date":"2026-09-03T18:55:07.565Z","timestamp":1788461707565,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bansuridabeli.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 09:31:04 GMT","end":"Thu, 05 Nov 2026 10:29:48 GMT"},"fingerprint":{"sha1":"35:85:D7:B5:71:A5:85:3E:3D:DC:AA:32:0F:D8:99:86:79:53:34:7A","sha256":"76:B5:25:8D:D1:37:C4:49:BC:C4:0E:F7:0E:9C:1C:46:CA:E0:92:13:99:5A:42:86:D7:D8:F7:41:00:C7:E7:47"}}},"request":{"raw":"GET /images/samosa-chaat.jpg HTTP/1.1\r\nHost: bansuridabeli.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://bansuridabeli.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Thu, 03 Sep 2026 18:55:07 GMT\r\ncontent-type: image/jpeg\r\npriority: u=5,i\r\ncf-ray: a356f7884b90c272-OSL\r\ncf-cache-status: MISS\r\naccept-ranges: bytes\r\ncache-control: max-age=31536000\r\netag: \"68dacb42-e6a08\"\r\nexpires: Fri, 03 Sep 2027 18:55:07 GMT\r\nlast-modified: Mon, 29 Sep 2025 18:09:06 GMT\r\nserver: cloudflare\r\nhost-header: 8441280b0c35cbc1147f8ba998a563a7\r\nx-proxy-cache-info: DT:1\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bnI6H52UxF8Up7ZpRGy6sYUV2act5lUfN54R7DehAClpQyvP%2F%2FyvTrEqzewMsvKRUc%2BlPfGvlCFCweTfs5q18DC9k9eHVZ1kRCt%2FWsekPsmSZs5hGPhwP4FuUHaN1v0F9ktNZX0%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 944648\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":944648,"size_decoded":945462,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 2460x1849, components 3","md5":"3e64a28bff19b540720486c1a4a045a9","sha1":"17e0dab2c352f101576ba17094c4c5e39e6880f8","sha256":"d60cedbe555e2f064baf8f412c6f78042d7c5b41d7b6dcbd30d3d1c40f4cd92a","sha512":"43be1c082adccdab9e394a5aa24e3d0558d8dca2425ad3c0f9ace9b47f7da2302613b1eccbcac284937a9844558bcac45ba92ae53813a52ae37c2778beeae0aa","ssdeep":"12288:gBamrRf7mebjAaP3/axZ0ODmnjctNz8hCGsc3rKlEguHzRLWTknKoqiIZXBUOKz5:FmxPjhXWpmnQPxFC9WTknjEZXBUNWkpb","tlshash":"4c1533c6eb963ce1a381097d7022d7335aa5162383766e48b2db9f98d06c4f1c17876f","first_seen":"2026-09-03T18:56:06.040903Z","last_seen":"2026-09-03T18:56:06.040903Z","times_seen":1,"resource_available":false,"data":null}},"time_used":382,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":238,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-03","alert":"Phishing Block","trigger":"bansuridabeli.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-03","alert":"Sinkholed","trigger":"bansuridabeli.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}